Nach einem Einbruch beim Marketing-Mail-Anbieter MailChimp haben Cyberkriminelle versucht, per Phishing an Kryptowährungen von Krypto-Wallet-Kunden zu gelangen.  ( 4 min )

Pentests helfen, die eigene IT auf Sicherheitsprobleme zu untersuchen. Worauf es dabei ankommt, zeigt Ihnen dieser Online-Workshop. 10 Prozent Rabatt bis 19.4.  ( 3 min )

MacBook Pro M1 2021 und Pro Display XDR erreichen dauerhaft bis zu 1000 Candela – allerdings fehlt dazu eine Konfigurationsoption. Eine neue Software kann es.  ( 4 min )

In jeweils dreitägigen Seminaren für Einsteiger und Fortgeschrittene lernen Teilnehmende die Grundlagen, Besonderheiten und den praktischen Einsatz von Node.js.  ( 4 min )

Das Active Directory ist der Dreh- und Angelpunkt bei Ransomware-Angriffen. Wie man es absichert, zeigt das neue iX kompakt auf über 170 Seiten.  ( 4 min )

Neue Versionen des Webbrowsers Google Chrome schließen eine Sicherheitslücke in der JavaScript-Engine V8. Vermutlich sind Edge und Chromium ebenfalls betroffen.  ( 4 min )

Auf zwei neue Funktionen setzt IBMs z16: Der neue Mainframe soll per KI Transaktionen in Echtzeit überprüfen können und ein quantensicheres Computing bieten.  ( 5 min )

Big iron also claimed to be 'quantum-safe' to protect against future hacks IBM has lifted the covers off the z16, the newest member of its Z Series mainframe family which focuses on the financial services industry with a new processor that has built-in AI acceleration for real-time fraud detection.…  ( 10 min )

Judge ponders battle royale between all three to avoid unhelpful overlaps Proceedings in the legal dispute between Epic Games and Apple have bogged down in Australia, and won't reach a courtroom until 2024.…  ( 9 min )

Move is supposed to be double-plus good for supply-chain security Google is planning to tighten the security around its open source Go programming language by requiring two Google employees to be involved in code changes, where previously only one approver needed to be company-affiliated.…  ( 9 min )

Customers in Indonesia promised warning of wobbles sooner than is otherwise possible Xiaomi has added an earthquake alert system to some of its smartphones, starting with a trial in Indonesia, as a result of a collaboration between the smartphone maker and Indonesian and Chinese government-supported agencies.…  ( 9 min )

Crooks used RAT to hijack superusers at India's Mahesh Bank, stole millions An Indian bank that did not have a valid firewall license, had not employed phishing protection, lacked an intrusion detection system and eschewed use of any intrusion prevention system has, shockingly, been compromised by criminals who made off with millions of rupees.…  ( 8 min )

This matters for China – and for HPE, Intel … and possibly Apple A consortium led by Chinese government-backed Beijing Jianguang Asset Management Co. Ltd (JAC Capital) has injected $9.4 billion into ailing Chinese chipmaker Tsinghua Unigroup, in a deal that will be appreciated by many big tech industry players.…  ( 8 min )

'Up to 50%' better price-performance than x86 equivalents ... Well, 2% is still up to 50%, we guess Microsoft claims its latest Arm-powered Azure virtual machines can provide up to 50 percent better price-performance than similar instances using x86 processors. The keywords here are "up to" as it matters whether or not you're relying on hyperthreading on the x86 systems.…  ( 9 min )

Staff socially engineered into handing over internal system credentials Mailchimp has confirmed a miscreant gained access to one of its internal tools and used it to steal data belonging to 100-plus high-value customers.…  ( 9 min )

Everything's bigger in Texas, even the flying package-slinging robots Wing will this Thursday launch a commercial drone delivery service in a major US metropolitan area, a first for the Alphabet-owned startup.…  ( 8 min )

Russian troops have also lost 676 tanks, 1,858 armored fighting vehicles, 332 artillery pieces, 107 multiple rocket launchers, 55 surface-to-air missiles, 150 jets, 134 helicopters, 7 ships, 76 fuel tanks, 94 drones, and 4 ballistic missile systems, the General Staff said on April 5. The post Ukraine’s General Staff: 18,500 Russian soldiers killed during invasion. appeared first on The Kyiv Independent.  ( 1 min )

Ursula von der Leyen and Josep Borrell will arrive in Kyiv this week, Ivan Jansa said on April 5. He also said that the embassies of the EU mission and Lithuania would return to Kyiv. The post Slovenian prime minister says European Commission president, EU foreign minister will visit Kyiv. appeared first on The Kyiv Independent.  ( 1 min )

At least 266 children have been injured, the prosecutors said on April 5. This figure does not take into account children’s casualties in front-line areas such as Mariupol in Donetsk Oblast, as well as Kyiv, Chernihiv and Luhansk oblasts. The post Prosecutor General’s Office: At least 165 children killed as a result of Russian aggression. appeared first on The Kyiv Independent.  ( 1 min )

Sumy Oblast Governor Dmytro Zhyvytsky reported on April 5 that in Konotop district of Sumy Oblast, the Ukrainian military found the bodies of at least three tortured civilians in places where Russian forces had been stationed. Russians withdrew from Sumy region on April 3. The post Bodies of tortured civilians found in Sumy Oblast. appeared first on The Kyiv Independent.  ( 1 min )

The deal is valued at $1.6 billion to provide Bulgaria with fighter jets and related support equipment. According to Reuters, U.S. officials said the sale agreement was not directly related to Russia’s war on Ukraine. The war has prompted Ukraine’s government to ask that countries with MiG aircraft – including […] The post US State Department approves potential sale of up to eight F-16 aircraft to Bulgaria. appeared first on The Kyiv Independent.  ( 1 min )

The UCC, a group representing over 1.3 million Ukrainian-Canadians, set forth the idea to include the fund in the federal government’s budget. If successful, the fund would provide additional financing for fighter aircraft, weapon systems and munitions along with a financing program similar to the Marshall Plan implemented after World […] The post Ukrainian Canadian Congress proposes a ‘Ukraine Victory Fund.’ appeared first on The Kyiv Independent.  ( 1 min )

The German software giant SAP appears to have been hypocritical about its promises to stop providing cloud services to Russian clients over Russia’s war in Ukraine. According to a document obtained by the Kyiv Independent, just a day before the company’s public announcement to shut down its cloud services in […] The post Germany’s software giant SAP keeps its Russian clients despite claims it shut down cloud services in Russia appeared first on The Kyiv Independent.  ( 3 min )

Artillery rounds hit the building seven times, according to Ukraine’s military, damaging manufacturing equipment. There’s no threat to local residents. The post Russian forces shell chemical plant in Donetsk Oblast. appeared first on The Kyiv Independent.  ( 1 min )

Sirens have been activated in the Cherkasy, Chernivtsi, Dnipropetrovsk, Donetsk, Ivano-Frankivsk, Kharkiv, Khmelnytsky, Kirovohrad, Kyiv, Lviv, Mykolaiv, Odesa, Poltava, Rivne, Sumy, Ternopil, Vinnytsia, Volyn, Zakarpattya, Zaporizhzhia and Zhytomyr oblasts and in the city of Kyiv. The post Air raid alerts go off in almost every region of Ukraine. appeared first on The Kyiv Independent.  ( 1 min )

Editor’s note: Editorials are articles that present the opinion of the editorial team of the Kyiv Independent.  We write this editorial with difficulty. Journalists are the people of words, but right now it’s hard to find the ones to reflect what we feel.  The uncovered atrocities of Russians have left […] The post Editorial: Give Ukraine everything it asks for and now appeared first on The Kyiv Independent.  ( 5 min )

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added the recently disclosed remote code execution (RCE) vulnerability affecting the Spring Framework, to its Known Exploited Vulnerabilities Catalog based on "evidence of active exploitation." The critical severity flaw, assigned the identifier CVE-2022-22965 (CVSS score: 9.8) and dubbed "Spring4Shell", impacts Spring  ( 3 min )

Neue Versionen des Webbrowsers Google Chrome schließen eine Sicherheitslücke in der JavaScript-Engine V8. Vermutlich sind Edge und Chromium ebenfalls betroffen.  ( 4 min )

A new WhatsApp phishing campaign impersonating WhatsApp's voice message feature has been discovered, attempting to spread information-stealing malware to at least 27,655 email addresses. [...]  ( 4 min )

If your internet megaphone lands you in enough trouble, might as well own part of it Social media service Twitter saw its stock surge on Monday because tech thinkfluencer Elon Musk took a 9.2 percent stake in the company.…  ( 9 min )

Investors given 'materially incomplete and misleading' info, it is claimed A Mandiant shareholder has launched a legal challenge to block Google's $5.4 billion takeover of the threat intelligence firm.…  ( 9 min )

If your boss is bugging you about this tech, here's how to respond The state of the metaverse, says Forrester, is that there isn't one. Yet.…  ( 9 min )

Pat Gelsinger won't unlock most of that unless Xeon giant's stock goes sky high  ( 10 min )

Web giant's racks and appliances now generally available Google Distributed Cloud Edge (GDCE) has hit general availability.…  ( 7 min )

Thought Sacha Baron Cohen was a terrible threat actor? Get a load of this: encrypts/steals data, records audio/video and controls keyboard A new remote access trojan (RAT) dubbed "Borat" doesn't come with many laughs but offers bad actors a menu of cyberthreats to choose from.…  ( 8 min )

Semiconductor drought 'affecting all plants and models' says automaker Volvo is again blaming "chip shortages" after the company experienced a 22.1 percent drop in sales for cars in March compared to the previous year.…  ( 7 min )

Talks up 'Client-Edge-Cloud-Network-Intelligence' as it looks to consolidate lockdown gains Lenovo says it is looking to hire 12,000 workers in research and development (R&D) roles.…  ( 8 min )

Community-supported, Red Hat-compatible distro now available to Microsoft fans A Windows Subsystem for Linux-friendly version of AlmaLinux has turned up in the Microsoft Store, adding to an impressive array of options for WSL users.…  ( 7 min )

One year in, CEO Yuki Kusumi wants diversification and growth Panasonic will invest ¥600 billion ($4.89 billion) in electronic vehicle (EV) batteries, hydrogen energy, workplace digitization and supply chain software in a strategy shift for the 104-year old Japanese multinational.…  ( 8 min )

Reportedly has already sent a Q&A to Microsoft cloud rivals, customers The European Commission is starting to gently probe allegations against Microsoft of anti-competitive practices in the cloud computing industry as it pertains to the company’s licensing rules.…  ( 9 min )

Strengthens SDN smarts for hyperscalers, small clouds, and maybe 5G, gives Xilinx some work too AMD has announced it will acquire networking vendor Pensando for $1.9 billion.…  ( 7 min )

We talk to some players in the Apple device management game MacAD  No, it isn't an April Fool's joke we forgot to publish. The Register* actually made it to a recent in-person Apple event: the 2022 Mac Administrator and Developer conference, MacAD. Apple, it seems, may be getting ever more serious about the enterprise.…  ( 9 min )

Customers wake to a nightmare as payment data pilfered from UK website Emma Sleep Company has confirmed to The Reg that it suffered a Magecart attack which enabled ne'er-do-wells to skim customers' credit or debit card data from its website.…  ( 9 min )

Who left that bit of rocket there? It's getting a bit crowded in orbit There was a sigh of relief from ESA controllers over the weekend as the Copernicus Sentinel-1A satellite successfully dodged a decades-old rocket fragment.…  ( 7 min )

The language wars were fun, but they're done Opinion  Here's a recipe for happiness. Don't get overexcited by the latest "C is not a language" kerfuffle.…  ( 9 min )

Beware the terminated techie: Revenge is a dish best preceded by an asterisk Who, Me?  With The Great Resignation upon us, depending on which survey you read, we present a reminder that when a programmer has to go… just let them go. Or face whatever form their vengeance might take. Welcome to Who, Me?…  ( 8 min )

Unusual move sees regulator open consultation on access to audit documents China's Securities Regulatory Commission has opened a consultation on revised regulations aimed at avoiding trouble for local tech companies that list on US stock markets.…  ( 8 min )

Meng Wanzhou will get her regular six-month stints in the role, starting who knows when Huawei executive Meng Wanzhou – who was famously held in Canada and is the daughter of company founder Ren Zhengfei – has quietly been named as one of three people who share the role as chair of the Chinese company's board.…  ( 8 min )

Asset management outfit Macquarie will buy existing bit barns. But first, check out the shiny new 15.2MW bit barn in Indonesia Japanese giant NTT has found a friend to help it fund the planned expansion of its datacenter fleet.…  ( 8 min )

Shame it's not finished – Microsoft has promised more hybrid cloud capabilities are coming real soon now Microsoft has quietly slipped System Center 2022 out the door, more than six months after the debut of Windows Server 2022 – but also flagged the product is not in its final state.…  ( 8 min )

GitHub announced on Monday that it expanded its code hosting platform's secrets scanning capabilities for GitHub Advanced Security customers to automatically block secret leaks. [...]  ( 4 min )

Cloudflare sees signs of Russians increasingly turning to Western news sources to get accurate information about the situation in Ukraine. [...]  ( 4 min )

​​​​​​​VMWare has published a security advisory for the critical remote code execution vulnerability known as Spring4Shell, which impacts multiple of its cloud computing and virtualization products. [...]  ( 4 min )

Email marketing firm MailChimp disclosed on Sunday that they had been hit by hackers who gained access to internal customer support and account management tools to steal audience data and conduct phishing attacks. [...]  ( 4 min )

Threat analysts have compiled a detailed technical report on FIN7 operations from late 2021 to early 2022, showing that the actor is still very active, evolving, and trying new monetization methods. [...]  ( 4 min )

Content delivery networks, or CDNs, allow you to improve the delivery of your website’s static resources, most notably, with CDN caching. They do this by serving your content from edge locations, which are located all over the world. When a … Adding CDN Caching to a Vite Build originally published on CSS-Tricks. You should get the newsletter.  ( 5 min )

Tutoren des Nachhilfe-Startups Gostudent erheben schwere Vorwürfe gegen die Plattform: Es ist von Datenschutzverstößen und verspäteten Lohnzahlungen die Rede.  ( 4 min )

Ein halbes Jahr nach der Einführung des neu aufgelegten MacBook Pro vertreibt der Hersteller erstmals generalüberholte Modelle zu einem niedrigeren Preis.  ( 4 min )

Die Western Australia Police hofft, durch eine iPhone-Integration in Einsatzfahrzeuge die Sicherheit und Effizienz zu erhöhen.  ( 4 min )

Die neue Online-Konferenzreihe von DER SPIEGEL und Heise behandelt Themen wie Führungskompetenz, Zusammenarbeit in Teams sowie hilfreiche Tools und Techniken.  ( 4 min )

In einer globalen Operation haben internationale Strafverfolger 65 Verdächtige verhaftet, die betrügerische Geschäftsmails zur Abzocke von Opfern sendeten.  ( 4 min )

Am 30. Juni 2022 findet der nächste POD statt. Die vierte Auflage des Online-Events dreht sich um Scrum, Product Leadership, Moderationsskills und Streitkultur.  ( 4 min )

Dominique und Oliver Winter erläutern in dieser Folge des Produktwerker-Podcast, warum Magic Estimation für Product Owner extrem hilfreich sein kann.  ( 2 min )

Eine an die Öffentlichkeit gelangte Datenbank zu Bestellungen bei einem russischen Lieferdienst zeigt einmal mehr, wie viel die Daten verraten können.  ( 4 min )

Bei Snapchat lassen sich Youtube-Videos neuerdings als Sticker versenden. Die Funktion ist sowohl unter Android als auch unter iOS verfügbar.  ( 3 min )

Künftig stehen russischen Nutzern keine Unwetterwarnungen mehr zur Verfügung, da die Kooperation mit einem staatlichen Institut eingestellt wurde.  ( 4 min )

Die openSUSE-Entwickler arbeiten derzeit an einem neuen Installationsassistenten. Eine sehr frühe Version des D-Installers lässt sich jetzt ausprobieren.  ( 4 min )

Die populäre Mac-App kommt mit einem überarbeiteten Interface und zahlreichen neuen "Blocks" zur Live-Verarbeitung von Audio.  ( 4 min )

Angriffsvektoren in der eigenen Unternehmens-IT mit Hacker-Mitteln aufdecken und beseitigen lernen. Online-Schulung an 2 Tagen, mit 10 Prozent Rabatt bis 21.4.  ( 3 min )

Java-Software-Entwickler und -architekten erhalten handfeste Programmierpraxis zu den diversen JDK-APIs für Parallelität. 10 % Frühbucherrabatt bis 18.4.  ( 3 min )

In den Niederlanden standen am Sonntag plötzlich die meisten Züge still. Ein wichtiger Teil des Verkehrsleitsystems hat verrücktgespielt.  ( 4 min )

The daring Chinese biophysicist who created the world’s first gene-edited children has been set free after three years in a Chinese prison. He Jiankui created shock waves in 2018 with the stunning claim that he’d altered the genetic makeup of IVF embryos and implanted them into a woman’s uterus, leading to the birth of twin…  ( 4 min )

A bleak new report from the UN’s climate panel underscores the price the world is paying for the long delays in addressing global warming despite decades of warnings. Last year, worldwide energy-related carbon dioxide topped 36 billion tons, setting a new record as the global economy sprang back from the depths of the pandemic. As…  ( 5 min )

An Android spyware application has been spotted masquerading as a "Process Manager" service to stealthily siphon sensitive information stored in the infected devices. Interestingly, the app — that has the package name "com.remote.app" — establishes contact with a remote command-and-control server, 82.146.35[.]240, which has been previously identified as infrastructure belonging to the  ( 3 min )

At least three different advanced persistent threat (APT) groups from across the world have launched spear-phishing campaigns in mid-March 2022 using the ongoing Russo-Ukrainian war as a lure to distribute malware and steal sensitive information. The campaigns, undertaken by El Machete, Lyceum, and SideWinder, have targeted a variety of sectors, including energy, financial, and governmental  ( 3 min )

A group of academics from the University of Oxford and Armasuisse S+T has disclosed details of a new attack technique against the popular Combined Charging System (CCS) that could potentially disrupt the ability to charge electric vehicles at scale. Dubbed "Brokenwire," the method interferes with the control communications that transpire between the vehicle and charger to wirelessly abort the  ( 3 min )

A previously undocumented "sophisticated" information-stealing malware named BlackGuard is being advertised for sale on Russian underground forums for a monthly subscription of $200. "BlackGuard has the capability to steal all types of information related to Crypto wallets, VPN, Messengers, FTP credentials, saved browser credentials, and email clients," Zscaler ThreatLabz researchers Mitesh Wani  ( 3 min )

A variant of the Mirai botnet called Beastmode has been observed adopting newly disclosed vulnerabilities in TOTOLINK routers between February and March 2022 to infect unpatched devices and expand its reach potentially. "The Beastmode (aka B3astmode) Mirai-based DDoS campaign has aggressively updated its arsenal of exploits," Fortinet's FortiGuard Labs Research team said. "Five new exploits were  ( 3 min )

Ever wondered how to build a paginated list that works with and without JavaScript? In this article, Manuel explains how you can leverage the power of Progressive Enhancement and do just that with Eleventy and Alpine.js.  ( 15 min )

A compromised Trezor hardware wallet mailing list was used to send fake data breach notifications to steal cryptocurrency wallets and the assets stored within them. [...]  ( 5 min )

A new remote access trojan (RAT) named Borat has appeared on darknet markets, offering easy-to-use features to conduct DDoS attacks, UAC bypass, and ransomware deployment. [...]  ( 4 min )

Für Version 2.0 der TI zur Digitalisierung des Gesundheitswesens fordern Experten eine höhere Nutzerfreundlichkeit, ein Migrationskonzept und eine Testumgebung.  ( 5 min )

Bundesinnenministerin Nancy Faeser (SPD) rüstet angesichts des Ukraine-Kriegs für digitale Gegenschläge. Die Ampel-Koalition ist an sich gegen Hackbacks.  ( 5 min )

Plus: Improving Google Search and open-source software library for more natural computer speech In brief  AI algorithms crushed eight world champions playing the card game Bridge, marking another milestone in machine learning systems becoming better than humans at specific games.…  ( 8 min )

Viasat und SentinelOne haben Details zum Cyberangriff auf KA-Sat veröffentlicht, der hierzulande Windräder lahmlegte. Sie sehen eine Botnetz-Verbindung.  ( 5 min )

Das Team der Linux-Distribution Elementary OS trennt sich. Gründerin Danielle Foré bleibt als Einzige an Bord und plant, den Fokus des Projektes zu ändern.  ( 4 min )

Cyberangreifer russischer Geheimdienste sollen die IT des ungarischen Außenministeriums unterwandert haben. Auch Nato- und EU-Dokumente seien abgeflossen.  ( 5 min )

Heute in c't uplink sprechen wir über Datenschutz bei Android: Einstellungen optimieren, Bloatware entfernen, Custom-ROMs installieren.  ( 4 min )

Plus: Hive hits health-care org, law enforcement ransomware response is lacking, and orgs can't meet new disclosure rules In Brief  Cybercriminals have used fake emergency data requests (EDRs) to steal sensitive customer data from service providers and social media firms. At least one report suggests Apple, and Facebook's parent company Meta, were victims of this fraud.…  ( 11 min )

When does this thing get to unionize? Robotics company Boston Dynamics is making one of its latest robots more generally commercially available: a mobile, autonomous arm called Stretch.…  ( 7 min )

If it can cut energy requirements for both, this idea might not stink after all Tomorrow Water, a subsidiary of Korean firm BKT, is aiming to make datacenters more environmentally friendly by colocating them with sewage treatment plants, an arrangement it claims can save both energy and water.…  ( 7 min )

It's a bug's life Video  After some careful study, it turns out the brain of an insect is pretty good at separating signal from noise.…  ( 8 min )

If decision is upheld, this 'could seriously harm FOSS and copyleft' A US federal district court decision in California favoring database biz Neoj4 is incorrect and imperils free open-source software, according to the Software Freedom Conservancy.…  ( 10 min )

White House chimes in: Folks 'in every state must have a free and fair choice' to unionize Amazon warehouse workers in New York City voted in favor of joining a trade union on Friday, marking the first-ever successful union campaign against the tech giant in its history.…  ( 8 min )

Two teenagers from the UK charged with helping the Lapsus$ extortion gang have been released on bail after appearing in the Highbury Corner Magistrates Court court on Friday morning. [...]  ( 3 min )

Yesterday, American Express users across the world including US, UK, and Europe, experienced widespread outages lasting hours, and some users continue to. BleepingComputer was able to briefly reproduce issues right before Amex confirmed partially restoring services. [...]  ( 4 min )

Yesterday, American Express users across the world including US, UK, and Europe, experienced widespread outages lasting hours, and some users continue to. BleepingComputer was able to briefly reproduce issues right before Amex confirmed partially restoring services. [...]  ( 4 min )

While ransomware is still conducting attacks and all companies must stay alert, ransomware news has been relatively slow this week. However, there were still some interesting stories that we outline below. [...]  ( 4 min )

A 15-year-old security vulnerability has been disclosed in the PEAR PHP repository that could permit an attacker to carry out a supply chain attack, including obtaining unauthorized access to publish rogue packages and execute arbitrary code. "An attacker exploiting the first one could take over any developer account and publish malicious releases, while the second bug would allow the attacker  ( 3 min )

The City of London Police on Friday disclosed that it has charged two of the seven teenagers, a 16-year-old and a 17-year-old, who were arrested last week for their alleged connections to the LAPSUS$ data extortion gang. "Both teenagers have been charged with: three counts of unauthorized access to a computer with intent to impair the reliability of data; one count of fraud by false  ( 3 min )

DevOps platform GitLab has released software updates to address a critical security vulnerability that, if potentially exploited, could permit an adversary to seize control of accounts. Tracked as CVE-2022-1162, the issue has a CVSS score of 9.1 and is said to have been discovered internally by the GitLab team. "A hardcoded password was set for accounts registered using an  ( 3 min )

Microsoft now allows enterprise admins to re-enable the MSIX ms-appinstaller protocol handler disabled after Emotet abused it to deliver malicious Windows App Installer packages. [...]  ( 4 min )

A previously unknown Android malware uses the same shared-hosting infrastructure previously seen used by the Russian APT group known as Turla, though attribution to the hacking group not possible. [...]  ( 4 min )

A previously unknown Android malware has been linked to the Turla hacking group after discovering the app used infrastructure previously attributed to the threat actors. [...]  ( 4 min )

A Mirai-based distributed denial-of-service (DDoS) botnet tracked as Beastmode (aka B3astmode) has updated its list of exploits to include several new ones, three of them targeting various models of Totolink routers. [...]  ( 4 min )

Japanese cybersecurity software firm Trend Micro has patched a high severity security flaw in the Apex Central product management console that can let attackers execute arbitrary code remotely. [...]  ( 3 min )

GitLab has addressed a critical severity vulnerability that could allow remote attackers to take over user accounts using hardcoded passwords. [...]  ( 3 min )

The European Parliament has taken the first steps for new legislation against money-laundering that covers cryptocurrency transactions, which are an important part of illicit activities today. [...]  ( 5 min )

Microsoft has added a new safeguard hold blocking Windows 11 upgrades for Windows 10 customers who don't import their Internet Explorer 11 (IE11) data into Microsoft Edge before trying to install the newest Windows version. [...]  ( 3 min )

Okta's outsourced provider of support services, Sitel (Sykes) has shared more information this week in response to the leaked documents that detailed the various incident response tasks carried out by Sitel after the Lapsus$ hack. [...]  ( 4 min )

Phishing attacks are abusing Microsoft Azure's Static Web Apps service to steal Microsoft, Office 365, Outlook, and OneDrive credentials. [...]  ( 3 min )

Fixed passphrases for OmniAuth users not such a great idea GitLab on Thursday issued security updates for three versions of GitLab Community Edition (CE) and Enterprise Edition (EE) software that address, among other flaws, a critical hard-coded password bug.…  ( 8 min )

Ferroelectric devices key for this qubit-slinging startup A Swiss quantum computing company claiming a world-first discovery has just marked what it believes is one of the largest funding rounds in the history of the quantum tech space.…  ( 8 min )

Open-source HPC suite now includes 100 full-release products The Extreme-scale Scientific Software Stack (E4S) project has released version 22.02 of its collection of software packages for developing, deploying and running scientific applications on high-performance compute (HPC) platforms.…  ( 8 min )

Pretty 'community' version of one of the best-known Linuxes in Middle Kingdom Deepin version 20.5 is the latest "Community" version of one of the best-known Chinese Linux distros, and shows an interesting blend of technological influences.…  ( 10 min )

In the meantime, Windows giant eliminates 'challenged restriction' Microsoft's attempts to have a 2021 lawsuit's claims regarding anti-competitive practices struck out were this week contested in UK courts.…  ( 8 min )

Two teenagers arrested as part of police probe into extortion group British police have charged two teenagers as part of an international investigation into the Lapsus$ cyber extortion gang.…  ( 8 min )

So long as the economy stays healthy, and supply can catch up to demand IDC forecasts that spending on compute and storage systems for cloud infrastructure will grow 21.7 percent this year compared to 2021. Spending on public clouds is also expected to pass that of non-cloud infrastructure in 2022.…  ( 9 min )

Tech’s posterchild of German industrial success must face its failures as it succumbs to midlife angst Feature  Like so many stories in the history of computing, it involves Xerox. Scientific Data Systems was sold by Xerox to IBM as part of a hardware deal. When Big Blue canned a related software project, a group of five German engineers saw an opportunity.…  ( 12 min )

Steering body calls for help to 'identify ISA gaps, build plans for future extensions' The momentum behind RISC-V is growing with the backing of tech heavyweights, but it comes with a challenge: encouraging CPU designers to stay on the same page, and to avoid the sort of fragmentation that happened in MIPS and Android.…  ( 10 min )

We can't have that contractor making us look bad Something for the Weekend  I nearly choked when I read the email. "Your eBay auction has ended. Your NFT has sold for $1 million." That's about $0.999999 million more than I thought it was worth, hence the surprise. Oh, and becoming comfortably well off was a bit of a jolt, I suppose.…  ( 12 min )

Also: Belarusian miscreants pivot to browser-in-the-browser attacks A Russian cybercrime gang has lately sent credential-phishing emails to the military of Eastern European countries and a NATO Center of Excellence, according to a Google threat report this week. …  ( 9 min )

Forrester Research is DeFi-ing current hype Analyst firm Forrester Research has had a look at Web3 – the buzzword describing blockchain-powered decentralized metaverse-y stuff – and decided there's not a lot to like.…  ( 9 min )

Company changed address to avoid probe after sending 378,553 messages Britain's data watchdog has issued an £80,000 penalty to a financial advisor that dispatched hundreds of thousands of unsolicited text messages during lockdown.…  ( 8 min )

Behold the rarest of IT skills: Tact and diplomacy On Call  Being On Call requires certain skills. Technical ability? Sure. A desire to help? Naturally. However, there are some calls where one has to dip into one's reservoirs of diplomacy. Two bytes: good. Loss of face: bad.…  ( 8 min )

And software nasty may have a VPNFilter link, too Tens of thousands of Viasat satellite broadband modems that were disabled in a cyber-attack some weeks ago were wiped by malware with possible links to Russia's destructive VPNFilter, according to SentinelOne.…  ( 11 min )

The deal is a long way from done and players can already foresee rival bids Singapore-based Effissimo Capital Management, the largest shareholder in troubled Japanese tech giant Toshiba, has signed a deal to sell its stake to American private investment firm Bain Capital – if Bain decides to launch a takeover bid.…  ( 8 min )

Managed to send material from his private email address The United States Department of Justice (DoJ) has revealed it has indicted a National Security Agency (NSA) employee for sharing top secret national security information with an unnamed person who worked in the private sector.…  ( 8 min )

Fittings open on Saturday, to make it easier to take motorized pals with you wherever you go Japanese startup Groove X will on Saturday stage fittings for a wearable sling - somewhat akin to baby carriers - designed to let owners of "Love Robots" more easily carry the machines wherever they go.…  ( 8 min )

Public agencies told to stop using overseas apps from 2025 as parallel imports approved, too Russian President Vladimir Putin has banned the purchase of foreign software – be it standalone applications or code shipping in equipment – for significant critical infrastructure projects, with limited exceptions.…  ( 8 min )

Vid-streamer iQIYI also earns a place Chinese search giant and AI cloud company Baidu has landed on the US Securities and Exchange Commission's provisional list of companies it might de-list because of opaque disclosures.…  ( 8 min )

Alphabet AI lab under fire after bosses 'dragged out' probe into abuse A former DeepMind employee has blasted the AI lab for being, in her view, "grossly inadequate" in dealing with internal sexual harassment.…  ( 8 min )

Die Eufy Video Doorbell Dual 2K überwacht den Eingangsbereich gleich mit zwei Kameras. Die App-Steuerung ist tadellos und die Videos werden lokal gespeichert.  ( 7 min )

Gegenwärtig ist das erforderliche hohe Maß an Vertrauen in den russischen Hersteller nicht gewährleistet, hat das Verwaltungsgericht Köln entschieden.  ( 4 min )

Bis einschließlich 9. Mai können sich Developer mit Vorträgen und Workshops für die nächste Ausgabe der Nürnberger Entwicklerkonferenz bewerben.  ( 3 min )

Unsere Übersicht kleiner, aber interessanter Meldungen enthält diese Woche unter anderem Slint, Lucene, GitHub Copilot, Quarkus und CMake.  ( 3 min )

Mehr als 35.500 Schülerinnen und Schülern starten Runde eins des Jugendwettbewerbs Informatik – so viele Kinder wie noch nie.  ( 3 min )

Apple steigt umfassender in den Geschäftskundenmarkt ein, vorerst nur in den USA. Der neue Dienst umfasst Geräteverwaltung, Cloud-Speicher und mehr Support.  ( 4 min )

Über den OLED-Gaming-Monitor AW3423DW wird hitzig diskutiert. c't 3003 klärt im Test, warum.  ( 8 min )

Die neue Version von YugaByteDB soll Entwicklern durch etliche neue Features, darunter die Integration in einige Werkzeuge, die Arbeit spürbar erleichtern.  ( 6 min )

Kann Grafana Doom? Drei Entwickler des Labs stellten sich beim Hackathon im März der Challenge und liefern zum Geburtstag des Spiels die Version "Doomfana".  ( 5 min )

Das Community-Festival präsentiert ein ebenso buntes wie informatives Programm rund um Container, Microservices, DevOps und CI/CD. Jetzt Tickets sichern.  ( 5 min )

Im Rahmen des Wettbewerbs "Grand Challenge der Quantenkommunikation" erhalten Projekte rund um die sichere quantenbasierte Authentifizierung Fördermittel.  ( 4 min )

Für Qt 5.15 verlängert die Qt Company den Support um zwei Jahre, allerdings nur für Abokunden oder über einen gesondert gebuchten Extended Support.  ( 4 min )

Dieses Jahr erscheinen die ersten GPUs mit HBM3-DRAM – SK Hynix gibt aber auch schon einen Ausblick auf die Nachfolgergeneration bis zum Jahr 2028+.  ( 4 min )

Die Gitlab-Entwickler haben ein Update veröffentlicht, um Sicherheitslücken zu schließen. Eine kritische Lücke könnte Angreifern die Kontoübernahme ermöglichen.  ( 4 min )

Neue Verschlüsselungsverfahren widerstehen auch Quantencomputern. Im Workshop lernen Softwareentwickler die nötige Theorie und bekommen Tipps für die Praxis.  ( 3 min )

In Rockwell Automation Logix-Kontrollern können Angreifer Sicherheitslücken ausnutzen, um eigenen Code auszuführen. Die CISA gibt Admins Handlungsempfehlungen.  ( 4 min )

Wie wird man eigentlich der eigene Chef? Drei ganz konkrete Tipps für Leute, die ihre Arbeitsweise und Projekte gerne selbstständig in die Hand nehmen wollen.  ( 4 min )

Am 1. April 1972 gründeten einige Ex-IBMler in der kurpfälzischen Provinz das derzeit einzige deutsche Softwarehaus von Weltrang: SAP.  ( 10 min )

Das Bundesgesundheitsministerium hat gegenüber der Kassenärztlichen Bundesvereinigung bestätigt: Praxen tragen keine Schuld für Konnektoren.  ( 4 min )

Angreifer könnten im Smarthome aufgrund einer Sicherheitslücke in RaspberryMatic die Kontrolle übernehmen. Ein Update zum Absichern steht zur Verfügung.  ( 3 min )

Unter Verwendung von Systemroutinen war es möglich, Apples zentralen Account abzufischen. Der Konzern reagierte nur mit Verzögerung.  ( 4 min )

Die Betriebssystem-Updates sollen Bugs beseitigen, die iPhone- und Mac-Nutzer geplagt haben. Sicherheitslücken werden offenbar aktiv für Angriffe ausgenutzt.  ( 4 min )

The cyberattack aimed at Viasat that temporarily knocked KA-SAT modems offline on February 24, 2022, the same day Russian military forces invaded Ukraine, is believed to have been the consequence of wiper malware, according to the latest research from SentinelOne. The findings come as the U.S. telecom company disclosed that it was the target of a multifaceted and deliberate" cyberattack against  ( 3 min )

Two new security vulnerabilities have been disclosed in Rockwell Automation's programmable logic controllers (PLCs) and engineering workstation software that could be exploited by an attacker to inject malicious code on affected systems and stealthily modify automation processes. The flaws have the potential to disrupt industrial operations and cause physical damage to factories in a manner  ( 3 min )

Threat actor groups like Wizard Spider and Sandworm have been wreaking havoc over the past few years – developing and deploying cybercrime tools like Conti, Trickbot, and Ryuk ransomware. Most recently, Sandworm (suspected to be a Russian cyber-military unit) unleashed cyberattacks against Ukranian infrastructure targets. To ensure cybersecurity providers are battle ready, MITRE Engenuity uses  ( 4 min )

A Chinese advanced persistent threat tracked as Deep Panda has been observed exploiting the Log4Shell vulnerability in VMware Horizon servers to deploy a backdoor and a novel rootkit on infected machines with the goal of stealing sensitive data. "The nature of targeting was opportunistic insofar that multiple infections in several countries and various sectors occurred on the same dates," said  ( 4 min )

The North Korean state-backed hacking crew, otherwise known as the Lazarus Group, has been attributed to yet another financially motivated campaign that leverages a trojanized decentralized finance (DeFi) wallet app to distribute a fully-featured backdoor onto compromised Windows systems. The app, which is equipped with functionalities to save and manage a cryptocurrency wallet, is also designed  ( 3 min )

Networking equipment maker Zyxel has pushed security updates for a critical vulnerability affecting some of its business firewall and VPN products that could enable an attacker to take control of the devices. "An authentication bypass vulnerability caused by the lack of a proper access control mechanism has been found in the CGI program of some firewall versions," the company said in an advisory  ( 3 min )

Apple on Thursday rolled out emergency patches to address two zero-day flaws in its mobile and desktop operating systems that it said may have been exploited in the wild. The shortcomings have been fixed as part of updates to iOS and iPadOS 15.4.1, macOS Monterey 12.3.1, tvOS 15.4.1, and watchOS 8.5.1. Both the vulnerabilities have been reported to Apple anonymously. Tracked as CVE-2022-22675,  ( 3 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Droughts are cutting into California’s hydropower. Here’s what that means for clean energy. The droughts that swept across the western US in 2021 sparked wildfires and damaged crops. But the historic lack of…  ( 4 min )

The droughts that swept across the western US in 2021 sparked wildfires and damaged crops. But the historic lack of water also had an impact on one of California’s key sources of renewable energy: hydropower. Electricity generation from California hydropower plants was down 48% from the 10-year average, according to new data from the Energy…  ( 3 min )

Die Gitlab-Entwickler haben ein Update veröffentlicht, um Sicherheitslücken zu schließen. Eine kritische Lücke könnte Angreifern die Kontoübernahme ermöglichen.  ( 4 min )

In Rockwell Automation Logix-Kontrollern können Angreifer Sicherheitslücken ausnutzen, um eigenen Code auszuführen. Die CISA gibt Admins Handlungsempfehlungen.  ( 4 min )

Angreifer könnten im Smarthome aufgrund einer Sicherheitslücke in RaspberryMatic die Kontrolle übernehmen. Ein Update zum Absichern steht zur Verfügung.  ( 3 min )

Die Betriebssystem-Updates sollen Bugs beseitigen, die iPhone- und Mac-Nutzer geplagt haben. Sicherheitslücken werden offenbar aktiv für Angriffe ausgenutzt.  ( 4 min )

Next.js’ recent 12.0 release included a new beta feature: middleware. For a detailed explanation, you can read all about it in Sam’s previous article, “[Next.js Wildcard Subdomains](https://www.smashingmagazine.com/2021/11/nextjs-wildcard-subdomains/)”. This article, on the other hand, dives into the overall concept of middleware and how handy it can be in building things.  ( 6 min )

Nothing like a little kernel-level memory snooping, code execution Apple has released updates for its mobile and desktop operating systems to patch security holes that may well have been exploited in the wild.…  ( 7 min )

Uni trio probe efforts by miners to max out rewards at expense of others UC Berkeley boffins have found that strategies for squeezing extra profit out of Ethereum transactions come at the cost of other cryptocurrency investors and threaten the security and stability of the entire Ethereum ecosystem.…  ( 10 min )

Troubled container company may escape confines of its doldrums Docker hasn't just got back in the fight thanks to its latest round of funding: it's earned double-unicorn status, too. …  ( 7 min )

Lead dev of modest ground-up Unix-like OS quits job to work on it SerenityOS, which started out as a one-man project in 2018, has now got to the point where its creator proudly announced that its web browser passes the Acid3 browser test.…  ( 8 min )

Backers include SK Lubricants as dielectric fluid research partner An enterprise immersion cooling company has received a $28 million investment it plans to use to sink itself into additional customer datacenters.…  ( 8 min )

Will provide tips on spotting bad info, frontload highly cited sources Further embracing its unspoken role as arbiter of truth, Google has unrolled some new search result features to help users "sort out what information is credible and what isn't."…  ( 8 min )

You didn't have any plans for the weekend anyway, did you? Another Java Remote Code Execution vulnerability has reared its head, this time in the popular Spring Framework and, goodness, it's a nasty one.…  ( 9 min )

Chip giant wants to compete in software while playing catch-up in silicon Intel hopes to gain an extra edge in the cloud and datacenter markets with the acquisition of Granulate, a developer of software that optimizes complex and old workloads for modern CPUs.…  ( 9 min )

RPA vendor's recurring revenue for 2023 will be down by $15m after pausing Russia operations UiPath's CEO has said the war in Ukraine is "having a profound impact" on business confidence in Europe and the UK.…  ( 8 min )

Reverse engineering yields sticky microarchitectural vulnerabilities Nvidia's ultra-dense GPU-driven AI training and inference systems are prone to covert and side channel attacks, according to research just published from a team led by Pacific Northwest National Laboratory (PNNL). This might be less concerning for those with on-prem DGX systems, but for cloud vendors selling time on the AI training boxes, the vulnerabilities are worth noting.…  ( 9 min )

Confused? Don’t be – Intel flagged this when it married Evo and vPro a while back Dell has refreshed its business laptops, predictably enough adding 12th-gen Intel silicon while also trying to make its offerings in a very well established product category stand out.…  ( 8 min )

Uses 64-node cluster of classical HPC boxen to prove it Fujitsu says it has developed the world's fastest quantum simulator capable of handling 36 qubit quantum circuits. The firm will use this to speed development of quantum applications, and said it is already planning a further simulator capable of handling more qubits.…  ( 8 min )

Windows 10 still rules the roost among Microsoft fans, according to AdDuplex The growth of Microsoft's flagship operating system, Windows 11, appears to be slowing if figures from AdDuplex are to be believed.…  ( 8 min )

GNOME 42 and some other small changes for both... though we still miss Unity Late April should see the release of the 36th versions of two of the biggest Linux distros: Fedora 36 and Ubuntu 22.04.…  ( 10 min )

'We have this small moment in time where we can make improvements in our defensive posture' The US and its NATO allies should expect a "long tail of retaliation," in the form of cyberattacks, for the sanctions imposed on Russia, says cloud security shop ExtraHop's CEO Patrick Dennis.…  ( 10 min )

Questions linger over Technology Sourcing Programme after 2nd supplier in a week awarded significant extensions for historic contract UK tax authority HMRC has awarded Fujitsu a £250m contract for managed desktop services (MDS), extending a deal that dates back to 2017.…  ( 8 min )

Hosting platforms required to report content creators' names and income to stymie tax dodges China's massive live-streaming industry is the next target of Beijing's tech regulation blitz, with three government agencies announcing a requirement for operators to register in an attempt to eliminate tax evasion.…  ( 8 min )

Architecture may make it possible to train one machine-learning model that performs all sorts of tasks Google says it is developing an AI architecture that can be used to train one giant system capable of performing multiple different tasks more efficiently than today's models.…  ( 9 min )

Your cloudy server will not self-destruct – even if the hardware it runs on does Amazon Web Services has added a small but important resilience feature: instances in its Elastic Computing Cloud (EC2) now include automatic recovery by default.…  ( 8 min )

Oh look, someone else who thinks on-prem is old hat Cryptocurrency mining groups that typically have targeted on-premises servers are now competing fiercely for servers in the cloud.…  ( 10 min )

Foundry giant's staff could be sleeping at work during new COVID lockdown Chipmaking giant TSMC says China's COVID lockdowns slowed PC and smartphone demand, but given the Taiwanese outfit already struggles to meet demand, company chair Mark Liu was unfussed by the dip.…  ( 8 min )

Speech also alleges Russian troops in Ukraine have mutinied, shot down own plane The director of UK intelligence agency Government Communications Headquarters (GCHQ), Sir Jeremy Fleming, has warned that China is trying to introduce "undemocratic values as the default for vast swathes of future tech and the standards that govern it."…  ( 10 min )

Think tank fears future studies of this sort may be harder as social networks withdraw data Russia, Iran and Saudi Arabia are the top three proliferators of state-linked Twitter misinformation campaigns, according to a report released Wednesday by the Australian Strategic Policy Institute (ASPI).…  ( 9 min )

Better late than never – all its global and Chinese hyperscale rivals are already there Alibaba Cloud has opened its first datacenter in South Korea.…  ( 8 min )

Ill-gotten gains bankrolled swish life of flash cars and real estate A now-former finance director stole tablet computers and other equipment worth $40 million from the Yale University School of Medicine, and resold them for a profit.…  ( 8 min )

Slap-a-teacher and smash-the-school crazes were carefully engineered smears, it is claimed Facebook parent Meta, which has been struggling to compete against TikTok, has reportedly been paying a Republican-oriented consulting firm to encourage negative media reports about the Chinese-owned rival.…  ( 10 min )

Better late than never The widely used Zlib data-compression library finally has a patch to close a vulnerability that could be exploited to crash applications and services — four years after the vulnerability was first discovered but effectively left unfixed.…  ( 9 min )

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal civilian agencies on Thursday to patch a critical Sophos firewall bug and seven other vulnerabilities within the next three weeks, all exploited in ongoing attacks. [...]  ( 3 min )

A new information-stealing malware named BlackGuard is winning the attention of the cybercrime community, now sold on numerous darknet markets and forums for a lifetime price of $700 or a subscription of $200 per month. [...]  ( 5 min )

Network equipment company Zyxel has updated the firmware of several of its business-grade firewall and VPN products to address a critical-severity vulnerability that could give attackers administrator-level access to affected devices. [...]  ( 3 min )

Apple has released security updates on Thursday to address two zero-day vulnerabilities exploited by attackers to hack iPhones, iPads, and Macs. [...]  ( 3 min )

A newly discovered data wiper malware that wipes routers and modems has been deployed in the cyberattack that targeted the KA-SAT satellite broadband service to wipe SATCOM modems on February 24, affecting thousands in Ukraine and tens of thousands more across Europe. [...]  ( 5 min )

A newly discovered data wiper malware that wipes routers and modems has been loosely linked to the cyberattack that targeted the KA-SAT satellite broadband service on February 24, affecting thousands in Ukraine and tens of thousands across Europe. [...]  ( 4 min )

The Chinese APT group known as Deep Panda has been spotted in a recent campaign targeting VMware Horizon servers with the Log4Shell exploit to deploy a novel rootkit named 'Fire Chili'. [...]  ( 4 min )

Spring released emergency updates to fix the 'Spring4Shell' zero-day remote code execution vulnerability, which leaked prematurely online before a patch was released. [...]  ( 3 min )

Curiosity and a love of learning are definite advantages in the cybersecurity field, and reading and learning more about the subject is just a few clicks away. The world needs more people out there fighting cybercrime. Perhaps one of them could be you. [...]  ( 5 min )

Atento has published its 2021 financial performance results, which have a massive $42.1 million dent from a ransomware attack the firm suffered in October 2021. [...]  ( 3 min )

EXCLUSIVE: A bug in the support dashboard of Palo Alto Networks (PAN) exposed thousands of customer support tickets to an unauthorized individual, BleepingComputer has learned. The exposed information included, customer names, contact information, conversations between staff and customers, firewall logs and configuration dumps. [...]  ( 4 min )

Hackers associated with the North Korean government have been distributing a trojanized version of the DeFi Wallet for storing cryptocurrency assets to gain access to the systems of cryptocurrency users and investors. [...]  ( 4 min )

Phishing actors are actively abusing Calendly to kick off a clever sequence to trick targets into entering their email account credentials on the phishing page. [...]  ( 4 min )

Reseller wie Timmunity und Alternate haben Sicherheitssoftware des russischen Produzenten aus dem Programm genommen oder gekündigt. Andere halten zu Kaspersky.  ( 5 min )

Besprechungen direkt in Docs, Bild-im-Bild-Modus für Meet, übersichtlichere Diskussionen in Spaces – Google erweitert sein Cloud-Office Workspace deutlich.  ( 4 min )

Durch Zugriff auf Mail-Adressen von Strafverfolgern konnten Hacker offenbar Nutzerdaten bei Diensten abfragen. In Notfällen werden Daten schnell herausgegeben.  ( 4 min )

Nur 1,5 Jahre hat das chinesische Start-up Moore Threads benötigt, um eigene Grafikkarten herzustellen. Zu den Geldgebern gehören chinesische Tech-Riesen.  ( 4 min )

Die GParted-Entwickler haben ihr minimalistisches Linux-System GParted Live mit ihrer Partitionsverwaltungssoftware auf den neuen Stand 1.4.0 gebracht.  ( 3 min )

Auf Druck von Regulierern erlaubt Apple sogenannten "Reader"-Apps das Setzen eines einzelnen externen Links zur Account-Verwaltung. Die Auflagen sind strikt.  ( 4 min )

Das Spring-Entwicklerteam stellt Patches für zwei Sicherheitslücken zur Verfügung. Daneben droht jedoch mit Spring4Shell eine weitere Gefahr.  ( 5 min )

Die neuen Werbetechniken sollen zuerst von Beta-Testern erprobt werden. Den Geltungsbereich der Datenschutzgrundverordnung scheut Google jedoch noch.  ( 4 min )

heise Developer präsentiert software-architektur.tv, Eberhard Wolffs Videocast. Weiter geht es mit dem Bau einer Architektur. Im Fokus: Benutzerfreundlichkeit.  ( 3 min )

Der renommierte Journalist und IT-Sicherheitsexperte Brian Krebs wurde vom Hersteller Ubiquiti für seine angeblich falsche Berichterstattung verklagt.  ( 5 min )

Die zweitägige Schulung bereitet Sie auf Prüfungen im Rahmen der Umsetzung des § 8a (3) des BSI-Gesetzes vor. 10 Prozent Frühbucherrabatt bis 18.4.  ( 3 min )

Arbeitgeber sind zukünftig zur Arbeitszeiterfassung verpflichtet. Software-Lösungen hierfür existieren viele – rechtliche Besonderheiten auch.  ( 14 min )

Die Plattform der ehemaligen Betreiber von Gurock Software erweitert zum Start der öffentlichen Testphase die Anbindung an Issue-Tracking-Systeme.  ( 4 min )

In zwei Tagen gut vorbereitet auf die Prüfung und Zertifizierung Ihrer IT-Produkte nach deutschen und europäischen Standards wie CC, BSZ und NESAS.  ( 3 min )

Dagger setzt auf ein Modulsystem für den Continuous-Integration-Prozess. Das Projekt erhält als Starthilfe eine Finanzspritze von 20 Millionen US-Dollar.  ( 4 min )

Sarah Hoffmann, Klassenlehrerin an einer Münchner Mittelschule, über ihre Erfahrungen mit den Experience Packages des Skills for Innovation-Programms von Intel.  ( 7 min )

Der mit einer Million US-Dollar dotierte "Nobelpreis für Informatik" geht an Jack Dongarra, der seit 50 Jahren an Algorithmen für Supercomputer forscht.  ( 3 min )

Basierend auf Unikernels lassen sich mit MirageOS schlanke und potente Abbilder für virtuelle Instanzen schaffen. Version 4 bietet einige Neuerungen.  ( 5 min )

Der mit dem A13-SoC ausgestattete Bildschirm verfügt über ein ausgefeiltes Innenleben, wie eine Zerlegung durch IFixIt zeigt.  ( 4 min )

Das Online-Event am 7. April liefert einschlägiges GitOps-Know-how – vom Bereitstellen der Infrastructure-as-Code bis zum automatisierten Software-Deployment.  ( 4 min )

Die Linux-Distribution Rolling Rhino Remix liefert ein Ubuntu-System, das sich immer auf dem neuesten Stand hält – aber nicht für jeden geeignet ist.  ( 4 min )

An fünf Terminen im April und Mai können sich Admins in 20 praxisnahen Stunden zu den wichtigsten Themen rund um Microsoft 365 weiterbilden.  ( 4 min )

Seit die EU ihren Gesetzesarm bis zu den DNS-Root-Servern in den USA ausstreckte, befürchten die Betreiber staatliche Einmischung, die das Internet beschneiden.  ( 7 min )

In Berlin bekräftigten Vertreter von Bund, Ländern und Wirtschaft, künftig Verwaltungstechnik gemeinsam zu gestalten. Neue Chancen für die Tech-Szene?  ( 5 min )

The maintainers of Spring Framework have released an emergency patch to address a newly disclosed remote code execution flaw that, if successfully exploited, could allow an unauthenticated attacker to take control of a targeted system. Tracked as CVE-2022-22965, the high-severity flaw impacts Spring Framework versions 5.3.0 to 5.3.17, 5.2.0 to 5.2.19, and other older, unsupported versions. Users  ( 3 min )

Three security vulnerabilities have been disclosed in the popular Wyze Cam devices that grant malicious actors to execute arbitrary code and access camera feeds as well as unauthorizedly read the SD cards, the latter of which remained unresolved for nearly three years after the initial discovery. The security flaws relate to an authentication bypass (CVE-2019-9564), a remote code execution bug  ( 3 min )

Researchers have disclosed what they say is the first-ever Python-based ransomware strain specifically designed to target exposed Jupyter notebooks, a web-based interactive computing platform that allows editing and running programs via a browser. "The attackers gained initial access via misconfigured environments, then ran a ransomware script that encrypts every file on a given path on the  ( 3 min )

A Belarusian threat actor known as Ghostwriter (aka UNC1151) has been spotted leveraging the recently disclosed browser-in-the-browser (BitB) technique as part of their credential phishing campaigns exploiting the ongoing Russo-Ukrainian conflict. The method, which masquerades as a legitimate domain by simulating a browser window within the browser, makes it possible to mount convincing social  ( 4 min )

A zero-day remote code execution (RCE) vulnerability has come to light in the Spring framework shortly after a Chinese security researcher briefly leaked a proof-of-concept (PoC) exploit on GitHub before deleting their account. According to cybersecurity firm Praetorian, the unpatched flaw impacts Spring Core on Java Development Kit (JDK) versions 9 and later and is a bypass for another  ( 3 min )

Taiwanese company QNAP this week revealed that a selected number of its network-attached storage (NAS) appliances are affected by a recently-disclosed bug in the open-source OpenSSL cryptographic library. "An infinite loop vulnerability in OpenSSL has been reported to affect certain QNAP NAS," the company said in an advisory published on March 29, 2022. "If exploited, the vulnerability allows  ( 3 min )

Das Spring-Entwicklerteam stellt Patches für zwei Sicherheitslücken zur Verfügung. Daneben droht jedoch mit Spring4Shell eine weitere Gefahr.  ( 5 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. This startup wants to kick-start a molecular electronics revival In 2000, many hoped molecular electronics (using single molecules to create circuits and components) would leapfrog silicon-based circuitry to allow computer chips to keep…  ( 4 min )

In 1999, Rice University chemist Jim Tour co-founded Molecular Electronics Corporation, a company that aimed to use single molecules to make a new type of electronic memory. But Tour had even bigger dreams. In a 2000 story in Wired, he foretold a future in which molecular electronics would leapfrog silicon-based circuitry, allowing computer chips to…  ( 5 min )

Let’s welcome the new month with some new wallpapers. Designed with love by artists and designers from across the globe, they are available in versions with and without a calendar for April 2022.  ( 7 min )

In memo seen by The Register, chip giant seems to be striving for championship yoga-levels of flexibility Intel is going to tell more of its staff to return to their campus desks after many have been working from home or working in the office occasionally, judging by an internal memo sent to employees on Tuesday.…  ( 8 min )

Now for lawmakers to wrangle over the fine print The US Senate this week passed the America COMPETES Act by a bipartisan 68-28 vote, moving more than $50 billion in semiconductor industry funding closer to President Biden's desk. …  ( 8 min )

Network equipment maker insists it acted responsibly following intrusion Network equipment maker Ubiquiti on Tuesday filed a lawsuit against infosec journalist Brian Krebs, alleging he defamed the company by falsely accusing the firm of covering up a cyber-attack.…  ( 8 min )

Lower-end of the family to roll out first – and desktops will have to wait Intel hopes to compete against Nvidia and AMD in the discrete GPU market with now-launched standalone graphics chips for laptops. These components are said to feature a slew of technologies designed to provide smoother gaming experiences and faster content-creation performance.…  ( 12 min )

Open Infrastructure Foundation boasts of growth, but observers note this is mostly existing users scaling up OpenStack's 25th release brings the usual crop of new features to the open-source cloud platform, including support for DPUs, better integration with Prometheus and Kubernetes, and a handy un-delete feature for file system shares.…  ( 8 min )

A misconfigured VPN appliance is to blame It turns out the only thing Russian forces needed to knock thousands of Ukrainian satellite broadband customers offline was a misconfigured VPN.…  ( 7 min )

Mission launched during a pandemic, returned during... oh God, what now? NASA astronaut Mark Vande Hei returned to Earth today aboard a Russian Soyuz capsule and accompanied by two Russian cosmonauts.…  ( 7 min )

Miscreants deployed cryptominers, backdoors since late December, Sophos says VMware's Horizon virtualization platform has become an ongoing target of attackers exploiting the high-profile Log4j flaw to install backdoors and cryptomining malware.…  ( 9 min )

Still can't say goodbye to the legacy browser? Some cookie and COM functionality has been restored Still got that one weird corporate app that simply must use Internet Explorer? Microsoft has tweaked IE mode in its Edge browser to lure the last holdouts.…  ( 7 min )

Claim NashStore will help Russians access common apps from May 9 A group of Russian developers are planning a Google Play alternative for Android users that will give those based in the country access to paid apps and services lost due to sanctions. …  ( 7 min )

Plus: It's looking for more Metaverse engineers in Canada Meta's plans to build a 166-hectare datacenter in the Netherlands' central Flevoland province have been put on hold.…  ( 8 min )

Konica Minolta maintenance system to be installed across 10 national support companies Swedish ERP and business application provider IFS has signed global contracts with Japanese businesses Konica Minolta and Japan Airlines.…  ( 7 min )

Post Nvidia deal collapse, Intel expressed similar interest back in February SK Hynix is reportedly considering forming a consortium to acquire UK chip designer Arm, however, the idea is said to be at a very early stage of planning, and Hynix may not actually proceed with the move.…  ( 8 min )

Cloud and data centre provider's liquidity hit by pandemic, energy costs, intransigent landlords The British division of global cloud and data centre services provider Sungard Availability Services was forced into administration amid a hike in energy bills and after failing to renegotiate landlord rental rates.…  ( 8 min )

No EVs were damaged in the making of this report Researchers from the University of Oxford published details of a vulnerability in the Combined Charging System that has the potential to abort charging.…  ( 7 min )

Non-destructively expand or shrink disk partitions while they still contain data GNOME Partition Editor version 1.4 was released this week by lead maintainer Curtis Gedak.…  ( 8 min )

Gender pay gap narrows, but the US remains top of pay-packet pops Puppet has emitted its seventh annual DevOps salary report, and there is good news: the gender wage gap appears to be narrowing.…  ( 8 min )

UK and Ireland survey reveals difficulties with housekeeping The majority of UK and Ireland SAP users are finding a lack of preparedness in data management is affecting migrations from SAP ECC 6.0 to SAP S/4HANA and/or a push towards automating business processes.…  ( 8 min )

Rejects offer of flat rate payrise, calling offer a 'relative pay cut' due to inflation BT's largest union is rejecting the offer of a flat rate pay rise and threatening to start laying the groundwork for national "statutory industrial ballot action" to ratchet up the pressure on the telecoms biz.…  ( 9 min )

Multi-cloud deal 'is going to take us a little bit longer than we thought,' says CIO The United States Department of Defense has delayed awarding a contract for its massive cloud project – known as the Joint Warfighting Cloud Capability (JWCC) – until December.…  ( 8 min )

Suggests it's prudent to plan for Putin weaponizing Russian products The UK's National Cyber Security Centre (NCSC) has advised users of Russian technology products to reassess the risks it presents.…  ( 8 min )

Meanwhile, Okta squirms as further details of slow hack response emerge Extortion gang Lapsus$ may to be back at work, despite the arrest of seven alleged operatives.…  ( 9 min )

Users of Redmond's two older cloudy CDNs told that the only route to future upgrades is migration Microsoft has created a new version of its Azure Front Door content delivery network (CDN), and told users of its existing two cloudy CDNs that if they want updates the way to get them is migrating to the new product.…  ( 8 min )

Project is a M*A*S*H-up of machine learning and battlefield decision-making A new DARPA initiative aims to ultimately give AI systems the same complex, rapid decision-making capabilities as military medical staff and trauma surgeons who are in the field of battle.…  ( 9 min )

Program co-lead tells us 'energy efficiency is the greatest need' Big names in tech are collaborating with academics to develop energy-optimized machine-learning and quantum-computing systems under the MIT AI Hardware Program, an initiative announced on Tuesday. …  ( 8 min )

SQL injection, race condition, bad cryptographic check pave way for infrastructure network takeovers SentinelOne this week detailed a handful of bugs, including two critical remote code execution vulnerabilities, it found in Microsoft Azure Defender for IoT.…  ( 10 min )

SQL injection, race condition, bad cryptographic check pave way for infrastructure network takeovers SentinelOne this week detailed a handful of bugs, including two critical remote code execution vulnerabilities, it found in Microsoft Azure Defender for IoT.…  ( 10 min )

US watchdog may do something about so-called blank-check IPO capers The US Securities and Exchange Commission is said to be preparing to adopt rules that would make those overseeing special purpose acquisition companies (SPACs) liable for financial exaggerations to investors.…  ( 8 min )

Other manufacturers may follow after import duties passed onto gamers, enthusiasts The US government's lifting of import tariffs on graphics cards from China has already led to a drop in some prices in America.…  ( 9 min )

Symantec team warns ransomware and spying could be next Internet fiends are using a relatively new piece of a malicious code dubbed Verblecon to install cryptominers on infected computers. …  ( 9 min )

US President Joe Biden today has extended the state of national emergency declared to deal with increasingly prevalent and severe malicious cyber threats to the United States national security, foreign policy, and economy. [...]  ( 3 min )

A new zero-day vulnerability in the Spring Core Java framework called 'Spring4Shell' has been publicly disclosed, allowing unauthenticated remote code execution on applications. [...]  ( 4 min )

IT and software consultancy firm Globant has confirmed that they were breached by the Lapsus$ data extortion group, where data consisting of administrator credentials and source code was leaked by the threat actors. [...]  ( 4 min )

The Google Threat Analysis Group (TAG) says more and more threat actors are now using Russia's war in Ukraine to target Eastern European and NATO countries, including Ukraine, in phishing and malware attacks. [...]  ( 3 min )

The Google Threat Analysis Group (TAG) says more and more threat actors are now using Russia's war in Ukraine to target Eastern European and NATO countries, including Ukraine, in phishing and malware attacks. [...]  ( 3 min )

Taiwan-based network-attached storage (NAS) maker QNAP warned on Tuesday that most of its NAS devices are impacted by a high severity OpenSSL bug disclosed two weeks ago. [...]  ( 4 min )

A coordinated operation conducted by the FBI and its international law enforcement partners has resulted in disrupting business email compromise (BEC) schemes in several countries. [...]  ( 4 min )

Threat analysts have discovered a new obfuscation technique used by the Hive ransomware gang, involving IPv4 addresses and a series of conversions that eventually lead to downloading Cobalt Strike beacons. [...]  ( 4 min )

Automated product security helps teams address automotive security vulnerabilities and bugs before - not after - they land companies in the headlines. [...]  ( 4 min )

US satellite communications provider Viasat has shared an incident report regarding the cyberattack that affected its KA-SAT consumer-oriented satellite broadband service on February 24, the day Russia invaded Ukraine. [...]  ( 4 min )

A new spear phishing campaign is taking place in Russia targeting dissenters with opposing views to those promoted by the state and national media about the war against Ukraine. [...]  ( 4 min )

Von 21 Solarstromspeichern erreichen im Test der HTW Berlin vier PV-Speichersysteme die Bestnote A. Insgesamt arbeiten die Systeme immer effizienter.  ( 6 min )

Eine Studie der britischen Medienaufsichtsbehörde Ofcom zeigt, dass 16 Prozent der Drei- bis Vierjährigen bereits Videos der Kurzvideoplattform Tiktok ansehen.  ( 4 min )

Die schnellsten Intel-GPUs erscheinen als Arc 7. Den Anfang machen allerdings die Arc-3-Modelle A370M und A350M für Notebooks.  ( 5 min )

Apples Monopol über iPhone-App-Vertrieb führt nach Ansicht einer niederländischen Stiftung zu "überhöhten Preisen". Sie droht mit einer Sammelklage.  ( 4 min )

Diese Ausgabe der RedMonk-Statistik verzeichnet Balance und wenig Bewegung – anders als im Vorjahr, wo bei der Frühjahrsausgabe die Karten neu gemischt wurden.  ( 7 min )

Themen auf Twitter sind auch in deutscher Sprache verfügbar. Damit will der Kurznachrichtendienst den Feed mit "relevanten Tweets, Events und Anzeigen" füllen.  ( 3 min )

Mit einem auf hiesige KMUs zugeschnittenen Cloud-Portfolio geht Stackit an den Start. Hinter dem Anbieter steht die Schwarz Gruppe.  ( 3 min )

Die Vorschauversion auf das kommende Windows 11-Update ergänzt eine Schaltfläche, um einfacher einen anderen Webbrowser als Edge zum Systemstandard zu machen.  ( 4 min )

Cyberganoven haben das Konsensverfahren hinter dem derzeit beliebtesten Blockchainspiel Axie Infinity kapern können und dabei fette Beute gemacht.  ( 4 min )

Neue Funktionen spendiert Google seinem Cloud-Office Workspace. Allerdings sollten Administratoren und Nutzer einen Blick auf die Tracking-Einstellungen werfen.  ( 4 min )

Findige Bürger nutzen VPNs und Tor, um Internetsperren zu umgehen. Der folgende Überblick zeigt die Stärken und Schwächen der aktuell beliebtesten Tools.  ( 7 min )

Machen Sie mehr aus Ihren Daten: Mit dem Python Scientific Stack die eigenen Unternehmensdaten analysieren & visualisieren. Mit 10 % Frühbucherrabatt bis 19.4.  ( 3 min )

ASRock verkauft ein Mining-System mit 12 Kombiprozessoren von AMD, die es offenbar aufgrund von Defekten nicht in Sonys PS5 geschafft haben.  ( 4 min )

Eine kürzlich entdeckte Sicherheitslücke in zlib könnte Angreifern ermöglichen, Schadcode auszuführen. Ein Patch steht seit vier Jahren bereit.  ( 4 min )

Neben neuen Events für WebContents erlaubt das Release das Festlegen eines Code-Cache-Verzeichnisses und es nutzt Textersetzungen in Menüs unter macOS.  ( 4 min )

Als grundlegende Neuerung erlaubt die UI-Bibliothek nun optionale Concurrency. Server Components sind nach wie vor experimentell.  ( 5 min )

Trotz der Festnahme angeblicher Mitglieder, ist die Lapsus$-Gruppe wohl weiter aktiv. 70 Gigabyte an Daten aus einem weiteren Hack wurden jetzt öffentlich.  ( 4 min )

Bereits sein drittes CDN bringt Microsoft auf den Markt. Es soll mit DevOps-Funktionen, einer engen Azure-Verknüpfung und einem simplen Preismodell punkten.  ( 3 min )

Die elektronische Authentisierungsfunktion des Personalausweises lässt sich jetzt ohne Gang zum Amt aktivieren.  ( 3 min )

Wie unterscheiden sich die Public Clouds von AWS, Azure, Google, der Telekom und Hetzner – und wie nutzen Sie sie effektiv? 10 % Frühbucherrabatt bis 18. April.  ( 3 min )

Wie schon das MacBook Pro kommt die kleine Workstation mit hochohmigen Kopfhörern zurecht. Das bestätigt der Konzern in einem Supportdokument.  ( 4 min )

Das Entwicklerteam hinter dem C++-Microframework Crow baut mit dem ersten stabilen Release die Anbindung an das Cross-Platform-Tool CMake weiter aus.  ( 3 min )

Die neue Version des Kiosksystems aktualisiert den Unterbau, schraubt an der automatischen Konfiguration und optimiert die Bildausgabe.  ( 4 min )

Wer für die eigenen Mitarbeiter einen Chat einrichten will, muss nicht zu MS Teams oder Slack greifen: Die freie Alternative Zulip liegt nun in Version 5.0 vor.  ( 4 min )

Nach der Erschwerung des App-Trackings bereitet Apple offenbar eine dauerhafte Aktivierung von Private Relay vor – zumindest spekuliert das die Branche.  ( 4 min )

Trend Micro warnt vor Angriffen auf eine Sicherheitslücke in zentralen Verwaltungssoftware Apex Central. Zum Abdichten des Lecks stehen Updates bereit.  ( 3 min )

Das Event findet am 3./4. Mai 2022 online statt. Die Veranstalter tragen damit der pandemischen Lage in Deutschland Rechnung.  ( 4 min )

Früh in diesem Jahr erreichen viele Gebiete in Deutschland hohe Waldbrandgefahrenstufen. Mit einem Früherkennungssystem sollen Brände schneller erkannt werden.  ( 4 min )

Googles hundertste Version von Chrome ist da. Zu den wichtigsten Neuerungen zählt die Option, Browser-Fenster unterschiedlichen physischen Monitoren zuzuweisen.  ( 3 min )

Eine ungewöhnliche Kooperation: Samsung und Western Digital arbeiten zusammen. Zwar nicht an gemeinsamen Produkten, aber an Standards zum Thema Zoned Storage.  ( 3 min )

We recently covered creating fancy borders with CSS mask properties, and now we are going to cut the corners with CSS mask and clip-path! A lot of techniques exist to cut different shapes from the corners of any element. … Tricks to Cut Corners Using CSS Mask and Clip-Path Properties originally published on CSS-Tricks. You should get the newsletter.  ( 12 min )

A nascent information stealer called Mars has been observed in campaigns that take advantage of cracked versions of the malware to steal information stored in web browsers and cryptocurrency wallets. "Mars Stealer is being distributed via social engineering techniques, malspam campaigns, malicious software cracks, and keygens," Morphisec malware researcher Arnold Osipov said in a report  ( 3 min )

A duo of researchers has released a proof-of-concept (PoC) demonstrating the ability for a malicious actor to remote lock, unlock, and even start Honda and Acura vehicles by means of what's called a replay attack. The attack is made possible, thanks to a vulnerability in its remote keyless system (CVE-2022-27254) that affects Honda Civic LX, EX, EX-L, Touring, Si, and Type R models manufactured  ( 3 min )

For anyone with interest in cybersecurity, learning Python is a must. The language is used extensively in white hat hacking, and professionals use Python scripts to automate tests. It also has a use in the “soft” side of cybersecurity — like scraping the web for compromised data and detecting bugs.  Featuring nine full-length video courses, The Complete 2022 Python Programmer Bundle helps you  ( 3 min )

The LAPSUS$ data extortion gang announced their return on Telegram after a week-long "vacation," leaking what they claim is data from software services company Globant. "We are officially back from a vacation," the group wrote on their Telegram channel – which has nearly around 54,000 members as of writing – posting images of extracted data and credentials belonging to the company's DevOps  ( 3 min )

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Energy (DoE) are jointly warning of attacks against internet-connected uninterruptible power supply (UPS) devices by means of default usernames and passwords. "Organizations can mitigate attacks against their UPS devices, which provide emergency power in a variety of applications when normal power sources are  ( 3 min )

SonicWall has released security updates to contain a critical flaw across multiple firewall appliances that could be weaponized by an unauthenticated, remote attacker to execute arbitrary code and cause a denial-of-service (DoS) condition. Tracked as CVE-2022-22274 (CVSS score: 9.4), the issue has been described as a stack-based buffer overflow in the web management interface of SonicOS that  ( 2 min )

In this series of articles, we highlight design patterns and techniques to design better interfaces. You can also find more examples in [“Smart Interface Design Patterns”](https://smart-interface-design-patterns.com/), a 6h-video course with 100s of hand-picked examples, curated by Vitaly.  ( 10 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Chatbots could one day replace search engines. Here’s why that’s a terrible idea. Large AI models can simulate natural language with remarkable realism. Trained on hundreds of books and much of the internet,…  ( 4 min )

The world’s oceans are amazing carbon sponges. They already capture a quarter of human-produced carbon dioxide when surface waters react with the greenhouse gas in the air or marine organisms gobble it up as they grow. Their effectiveness has prompted growing hopes that we could somehow accelerate those natural processes to boost the amount the…  ( 4 min )

Eine kürzlich entdeckte Sicherheitslücke in zlib könnte Angreifern ermöglichen, Schadcode auszuführen. Ein Patch steht seit vier Jahren bereit.  ( 4 min )

Trend Micro warnt vor Angriffen auf eine Sicherheitslücke in zentralen Verwaltungssoftware Apex Central. Zum Abdichten des Lecks stehen Updates bereit.  ( 3 min )

Google has released Chrome 100 today, March 29th, 2022, to the Stable desktop channel, and it includes a new logo, security improvements, development features, and more. [...]  ( 4 min )

A newly launched information-stealing malware variant called Mars Stealer is rising in popularity, and threat analysts are now spotting the first notable large-scale campaigns employing it. [...]  ( 4 min )

A hacker has stolen almost $620 million in Ethereum and USDC tokens from Axie Infinity's Ronin network bridge, making it possibly the largest crypto hack in history. [...]  ( 3 min )

Online retail and photography manufacturing platform Shutterfly has disclosed a data breach that exposed employee information after threat actors stole data during a Conti ransomware attack. [...]  ( 3 min )

Today, the US Federal Trade Commission (FTC) sued Intuit, the maker of tax preparation software TurboTax, over deceptive advertising campaigns pitching free tax filing products that millions couldn't use. [...]  ( 3 min )

The Federal Bureau of Investigation (FBI) warned US election officials on Tuesday of an ongoing and widespread phishing campaign trying to steal their credentials since at least October 2021. [...]  ( 4 min )

A new campaign from the hacking group tracked as APT36, aka 'Transparent Tribe' or' Mythic Leopard,' has been discovered using new custom malware and entry vectors in attacks against the Indian government. [...]  ( 4 min )

In a joint advisory with the Department of Energy, the Cybersecurity and Infrastructure Security Agency (CISA) warned U.S. organizations today to secure Internet-connected UPS devices from ongoing attacks. [...]  ( 3 min )

A Wyze Cam internet camera vulnerability allows unauthenticated, remote access to videos and images stored on local memory cards and has remained unfixed for almost three years. [...]  ( 4 min )

As important as end user training and message filtering may be, there is a third method that tip the odds in their favor. Because phishing attacks often come disguised as password reset emails, it is important to handle password resets in a way that makes it obvious that email messages are not part of the password reset process. [...]  ( 5 min )

British-based cybersecurity vendor Sophos warned that a recently patched Sophos Firewall bug allowing remote code execution (RCE) is now actively exploited in attacks. [...]  ( 3 min )

Europol has announced the arrest of 108 people suspected of being involved in an international call center operation that tricked victims into investment scams. [...]  ( 3 min )

Security researchers are warning of a relatively new malware loader, that they track as Verblecon, which is sufficiently complex and powerful for rannsomware and erespionage attacks, although it is currently used for low-reward attacks. [...]  ( 4 min )

Microsoft has released the optional KB5011563 cumulative update preview for Windows 11, with fixes for stop errors triggering blue screens of death (BSOD) and other issues. [...]  ( 5 min )

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal civilian agencies to patch a Google Chome zero-day and a critical Redis vulnerability actively exploited in the wild within the next three weeks. [...]  ( 3 min )

Cops say they saw gadget added at family safety center A Tennessee man was arrested on Friday for allegedly trying to track his partner by attaching an Apple Watch to her car to monitor her whereabouts.…  ( 9 min )

Folks fill out online forms only to be told to upgrade to paid versions Intuit, makers of the tax-filing software TurboTax, deceives folks with false advertising and claims its product is free to use when it isn't always free, the US Federal Trade Commission claimed in a lawsuit filed Monday.…  ( 9 min )

Cloud giant's Graviton forcing the hand of rivals, according to analysts The increasing adoption of Arm-compatible processors by cloud service providers is expected to grow the CPU architecture's penetration rate in datacenter servers to 22 percent by 2025, according to a report by Taiwan-based research firm TrendForce.…  ( 9 min )

Cloud giant's Graviton forcing the hand of rivals, according to analysts The increasing adoption of Arm-compatible processors by cloud service providers is expected to grow the CPU architecture's penetration rate in datacenter servers to 22 percent by 2025, according to a report by Taiwan-based research firm TrendForce.…  ( 9 min )

As with analytics, so with ML – we're keeping everything in the box, says Big Red Oracle has added autoML, real-time elasticity, and price-performance trade-offs to Heatwave, the analytics engine it piggybacks on MySQL transactional database.…  ( 8 min )

Optional update finally adds one-click default app selection to Windows 11 The latest set of optional cumulative updates for Windows 11 contains an unlisted addition that users have been clamoring for since the OSes release: A one-click default browser change. …  ( 8 min )

First world problems: Too many NVMe drives, not enough seconds to spare A new Linux kernel patch from a Google engineer resolves a problem caused by a condition that many of us might quite like to experience – having too many NVMe drives.…  ( 8 min )

Toward making software development 'frictionless' over multiple processors, accelerators Arm says heterogeneous compute architectures – those with a mix of CPUs, GPUs, DPUs, and other processor types – pose a challenge for software developers, and greater multi-architecture support is needed to address this.…  ( 8 min )

Mnuchin to be board chair of Softbank-backed security startup Zimperium Former US Treasury secretary Steve Mnuchin's private equity firm has announced its plans to buy a controlling stake in a mobile cybersecurity company for more than half a billion dollars.…  ( 8 min )

It may have an official-sounding name but it's a community effort Rolling Rhino is a new community remix of Ubuntu, but with a unique twist: it has a whole new release model, rather than just a different desktop.…  ( 8 min )

Operators used social media to distort status of fighting, instill panic in residents Ukraine's security agency has shut down five bot farms since the start of Russia's invasion of the country almost five weeks ago, slowing down a Russian operation designed to spread disinformation in the war-torn country and to sow panic among its frightened residents.…  ( 8 min )

Stopping Amazon, Google, others from prioritizing own products and services A letter from the Department of Justice to Congress makes it clear where the Biden administration stands on antitrust legislation targeting big tech: They're all for it.…  ( 8 min )

Aims for consistent management across public and private clouds Microsoft has unveiled a public preview of Arc-enabled Azure Stack HCI.…  ( 8 min )

The GPU giant says it's for the 'most ambitious users' Nvidia is finally releasing its latest monster of a graphics processor, the GeForce RTX 3090 Ti GPU, which it said will super-power content creation applications and enable 8K gaming, assuming you're willing to part with a couple thousand dollars.…  ( 8 min )

Interesting blue sky research aims to put the quant in quantum, although progress in sector isn't rapid IBM is working with HSBC bank to explore potential applications for quantum computing in financial services.…  ( 8 min )

Crew alleged to have banked over $1m thanks to pandemic-induced usage bumps Some might wish they could go back to the onset of the pandemic and invest in online communication tools. The problem for three software developers facing charges of insider trading is that they worked for one of these companies.…  ( 8 min )

You can't fool me, young man. It's C all the way down! Believe it or not, not everything is based on C. There are current, shipping, commercial OSes written before C was invented, and now others in both newer and older languages that don't involve C at any level or layer.…  ( 11 min )

Legit employers don't normally send a check before you've started – or ask you to send money to a Bitcoin address Scammers appear to be targeting university students looking to kickstart their careers, according to research from cybersecurity biz Proofpoint.…  ( 9 min )

Move follows Microsoft's own tools to find out how things are really done Celonis has bought Process Analytics Factory (PAF), a firm that integrates its technology with Microsoft's Power BI platform, in a deal said to be worth $100m.…  ( 8 min )

Not the first time the letters POS have been associated with someone's repo Sometimes the best things are the most simple. A case in point: sending GitHub issues to an old thermal POS printer via a Raspberry Pi.…  ( 9 min )

Playbook on how to sell into market worth tens of billions The UK government has published a guide to public-sector technology procurement which promises to offer vendors insight into forthcoming technology spending in the £46bn ($60bn) market.…  ( 9 min )

German retailer stops selling flying cameras from firm the US labels an arm of China's government Chinese drone-maker DJI has denied multiple allegations it has aided Russia's military during the illegal invasion of Ukraine – an extraordinary claim, as the firm has previously come to the attention of US authorities for leaking data and aiding human rights abuses.…  ( 9 min )

Software will figure out number of beds needed – up to three weeks ahead At least 100 NHS trusts in England are to start using machine-learning software to predict the number of patients expected to be admitted to Accident and Emergency departments each day.…  ( 9 min )

Of course it will officially be massively popular – regardless of how many actually use it China's top government officials have a new space to meet and "build the [Chinese Communist] Party": a custom-built metaverse.…  ( 9 min )

JD.com's own servers, sold by the rackful, using cold plate cooling tech to tease possible 1.1 PUE Chinese kit-maker to the stars, Inspur Technologies, and local e-commerce titan JD.com have started jointly offering servers – the very kit the web bazaar uses in production.…  ( 9 min )

Windows backdoor shows off some interesting techniques Cyber-criminals are using compromised Microsoft Exchange servers to spam out emails designed to infect people's PCs with IcedID,…  ( 10 min )

Massive job losses reported across Middle Kingdom's tech sector China's big tech companies are making deep job cuts, and at least one is framing them as "graduation" from the company.…  ( 9 min )

Chrome trials scheduled for FLEDGE and Topics APIs Google is preparing another round of tests for the latest iteration of its purportedly private-preserving ad technology, after last year's Federated Learning of Cohorts (FLoC) experiment revealed the need for further refinement.…  ( 10 min )

Don't forget about our big stateside expansion plans, say Asian foundries Contract chip manufacturers TSMC and Samsung Electronics reportedly want to ensure they can receive some part of the $52 billion in subsidies the United States plans to use to expand the country's chipmaking footprint.…  ( 8 min )

Die EU-Kommission will mit dem geplanten Chips-Gesetz massiv Investitionen fördern. Mitgliedsstaaten und die Industrie sehen noch Bedarf zum Nachjustieren.  ( 5 min )

In einem offenen Brief warnt der CEPIS-Dachverband nationaler Informatikvereinigungen vor "Client-Side Scanning" und fordert ein Recht auf Verschlüsselung.  ( 3 min )

Der 1,5 Exaflops starke Supercomputer Frontier geht erst 2023 vollständig ans Netz. Bis dahin gibt es den Mini-Ableger Crusher.  ( 3 min )

Das Arbeiten zu Hause mit Chat- und Video-Tools lässt die Grenzen zwischen Beruf und Privatleben verschwimmen. Spezielle Features sollen sensibilisieren.  ( 4 min )

Dank Akku und Solarpanel können Anwender die Reolink Go 4G nahezu autark einsetzen. Wie gut die Überwachungskamera in der Praxis funktioniert, zeigt ein Test.  ( 6 min )

Ein Strategiepapier legt die Ziele der Cyberagentur bis 2025 fest: Es gehe darum, mit Forschung die Cybersicherheit in Deutschland gesamthaft zu stärken.  ( 4 min )

Angreifer könnten aufgrund von Sicherheitslücken in nf_tables im Linux-Kernel ihre Rechte zu Root ausweiten. Patches dichten die Sicherheitslecks ab.  ( 4 min )

Da immer mehr Dienstleistungen digitalisiert werden, warnt die Bundesvereinigung der Senioren-Assistenten Deutschland vor einer zunehmenden Vereinsamung.  ( 3 min )

Nicht nur die größten globalen Cloud-Anbieter kommen aus den USA, auch die Cloud-Rechenzentren ballen sich in Nordamerika.  ( 3 min )

Nvidia quetscht die letzten Prozente Leistung aus der GA102-GPU und verkauft das Ergebnis als GeForce RTX 3090 Ti – mit gehörigem Preisaufschlag.  ( 4 min )

Das Nutzen der Möglichkeiten für die Verwaltung von Endgeräten ist kein Kann, sondern wird zum Muss.  ( 6 min )

Die Frage "Ist diese Software-Architektur zukunftssicher?" kann man eigentlich generell mit "nein" beantworten.  ( 7 min )

Das vogelbunte Linux-System etwa zum Suchen von Sicherheitslücken lässt sich auf dem Stable-Zweig Debians nieder. Neu ist eine Ausgabe für den Raspberry Pi 4.  ( 5 min )

Professionelle Videos sind wichtiger Teil der Unternehmenskommunikation. Der Workshop vermittelt Grundlagen von Planung über Dreh bis zur Postproduktion.  ( 4 min )

Amazon führt die ARM-Revolution an: AWS' Graviton-Prozessoren machen 2022 einen großen Teil aller neuen Server aus.  ( 4 min )

Das Zusammenspiel von Debian-Systemen und Redis kann zu ernsten Sicherheitsproblemen führen. Dagegen abgesicherte Versionen schaffen Abhilfe.  ( 3 min )

An fünf Terminen im Mai und Juni lernen Interessierte in 20 praxisnahen Stunden, ihre Rolle als Product Owner zu meistern.  ( 4 min )

In der Nacht kam es zu einem massiven Cyberangriff auf einen der größten ukrainischen Internetprovider. Die Lage normalisiert sich inzwischen jedoch wieder.  ( 3 min )

Am Montag war Twitter fast eine halbe Stunde lang nur eingeschränkt zu erreichen. Grund war eine Fehlkonfiguration in Russland. Über die Gründe wird spekuliert.  ( 3 min )

Am kommenden Dienstag geht es beim nächstenThementag der Online-Konferenz storage2day um Storage für die Cloud und aus der Cloud. Die Teilnahme ist kostenlos.  ( 3 min )

Angreifer könnten die Authentifizierung in einigen Zyxel-Firewalls umgehen und dadurch die Kontrolle über die Geräte erlangen. Firmware-Updates stehen bereit.  ( 3 min )

Wie lässt sich Microsofts Cloud-Officepaket 365 sicher und in Übereinstimmung mit den unternehmenseigenen Compliance-Regeln einsetzen? Bis 12.4. 10 % Rabatt.  ( 3 min )

After two years where almost everything moved online, 2022 marks the return of in-person conferences. In fact, [SmashingConf is back](https://smashingconf.com/conferences): coming to San Francisco and Austin in June, Freiburg (Germany) in September, and New York in October.  ( 3 min )

Are you a designer or developer affected by the war in Ukraine? Here are some options to consider if you’re looking for a design or tech job.  ( 3 min )

Angreifer könnten aufgrund von Sicherheitslücken in nf_tables im Linux-Kernel ihre Rechte zu Root ausweiten. Patches dichten die Sicherheitslecks ab.  ( 4 min )

Das Zusammenspiel von Debian-Systemen und Redis kann zu ernsten Sicherheitsproblemen führen. Dagegen abgesicherte Versionen schaffen Abhilfe.  ( 3 min )

Angreifer könnten die Authentifizierung in einigen Zyxel-Firewalls umgehen und dadurch die Kontrolle über die Geräte erlangen. Firmware-Updates stehen bereit.  ( 3 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. A US oil-drilling hotspot is kicking out far more methane than we thought The news: One of the largest and fastest-growing oil production sites in the US is emitting far more methane than…  ( 4 min )

At last year’s Google I/O, its annual showcase of new widgets and work-in-progress tech, CEO Sundar Pichai revealed his company’s “latest breakthrough in natural-language understanding”: a chatbot called LaMDA, designed to converse on any topic.   He then gave a demo in which LaMDA answered questions about Pluto in natural language. The exchange showed off a…  ( 7 min )

A threat actor of likely Pakistani origin has been attributed to yet another campaign designed to backdoor targets of interest with a Windows-based remote access trojan named CrimsonRAT since at least June 2021. "Transparent Tribe has been a highly active APT group in the Indian subcontinent," Cisco Talos researchers said in an analysis shared with The Hacker News. "Their primary targets have  ( 3 min )

A group of academics has designed a new system known as "Privid" that enables video analytics in a privacy-preserving manner to combat concerns with invasive tracking. "We're at a stage right now where cameras are practically ubiquitous. If there's a camera on every street corner, every place you go, and if someone could actually process all of those videos in aggregate, you can imagine that  ( 3 min )

Cybersecurity firm Sophos on Monday warned that a recently patched critical security vulnerability in its firewall product is being actively exploited in real-world attacks. The flaw, tracked as CVE-2022-1040, is rated 9.8 out of 10 on the CVSS scoring system and impacts Sophos Firewall versions 18.5 MR3 (18.5.3) and older. It relates to an authentication bypass vulnerability in the User Portal  ( 2 min )

An unidentified threat actor has been observed employing a "complex and powerful" malware loader with the ultimate objective of deploying cryptocurrency miners on compromised systems and potentially facilitating the theft of Discord tokens. "The evidence found on victim networks appears to indicate that the goal of the attacker was to install cryptocurrency mining software on victim machines,"  ( 3 min )

Cybersecurity researchers have shed more light on a malicious loader that runs as a server and executes received modules in memory, laying bare the structure of an "advanced multi-layered virtual machine" used by the malware to fly under the radar. Wslink, as the malicious loader is called, was first documented by Slovak cybersecurity company ESET in October 2021, with very few telemetry hits  ( 3 min )

A threat actor dubbed "RED-LILI" has been linked to an ongoing large-scale supply chain attack campaign targeting the NPM package repository by publishing nearly 800 malicious modules. "Customarily, attackers use an anonymous disposable NPM account from which they launch their attacks," Israeli security company Checkmarx said. "As it seems this time, the attacker has fully-automated the process  ( 3 min )

An independent security researcher has shared what's a detailed timeline of events that transpired as the notorious LAPSUS$ extortion gang broke into a third-party provider linked to the cyber incident at Okta in late January 2022. In a set of screenshots posted on Twitter, Bill Demirkapi published a two-page "intrusion timeline" allegedly prepared by Mandiant, the cybersecurity firm hired by  ( 3 min )

Privateer to help avoid collisions and more debris around our planet Apple co-founder Steve Wozniak opened up about his space startup Privateer at the Global Entrepreneurship Congress in Riyadh, Saudi Arabia this week.…  ( 9 min )

Gosh, some apps are flatter than others? Whatever shall we do? GNOME 42 is here, but its new look and feel doesn't yet include all of the environment. This is already causing rumblings of discontent.…  ( 9 min )

Says he wasn't given leave options available to women colleagues Michael Stickler, a former IBM data scientist, has sued Big Blue for gender discrimination and retaliation after he complained that he was not being offered the same family leave options available to his women colleagues.…  ( 9 min )

CPU clock versus cache The CPU horse race continues between Intel and AMD, this time with the impending availability of Intel's Core i9-12900KS, which is said to be able to hit 5.5GHz on two cores.…  ( 8 min )

Authentication bypass followed by remote-code execution at the network boundary Sophos has patched a remote code execution (RCE) vulnerability in its firewall gear that was disclosed via its bug-bounty program.…  ( 8 min )

Another bug squashed in JavaScript engine Google Chrome and Microsoft Edge have been updated to patch a security flaw an exploit for which is said to be in the wild.…  ( 8 min )

More than 70 businesses created fake profiles to close sales Two Stanford researchers have fallen down a LinkedIn rabbit hole, finding over 1,000 fake profiles using AI-generated faces at the bottom.…  ( 8 min )

Mustang Panda deploys variant of Korplug malware to target European officials and ISPs A China-based threat group is likely running a month-long campaign using a variant of the Korplug malware and targeting European diplomats, internet service providers (ISPs) and research institutions via phishing lures that refer to Russia's invasion of Ukraine and COVID-19 travel restrictions.…  ( 9 min )

Plantronics and Polycom have a new parent company HP Inc sees the future of its business as one supporting a workforce partially based at home and partially in the office, and appears to have bought office telecom giant Poly for that reason.…  ( 8 min )

'Tiny' testbed already crushes Oak Ridge's past supercomputers The United States has opened up a small but powerful test system for researchers to get a taste of what is expected to become the country's fastest supercomputer and one of the world's fastest. And the tiny testbed, named "Crusher" is already faster than previous top US supercomputers.…  ( 9 min )

'Not all open source is created equal' Interview  Cloud infrastructure outfit HashiCorp has traditionally been all about the freemium model and sold plenty of self-managed subscriptions for its services to customers over the years. That is changing.…  ( 11 min )

Subsidiary sales, enterprise division may be responsible for the buoying Chinese telecom giant Huawei's 2021 report is out, showing the company had a massive drop in total revenue last year, but an even bigger bump in profit. …  ( 9 min )

Refurbed former Thomson Reuters DC adds 12,000 sqm to holdings Colocation firm Telehouse has opened its fifth datacenter in London Docklands, claiming it will be the company’s largest global facility once fully up and running. The firm has invested £223 million into refurbishing the building, which was formerly the site of a datacenter operated by Thomson Reuters.…  ( 9 min )

Plus: Ransomware gangster sentenced, Dell patches more Log4j bugs, and cartoon apes gone bad In Brief  Triton malware remains a threat to the global energy sector, according to an FBI warning.…  ( 11 min )

Plus: GPT-NeoX-20B, the largest open-source language model available yet, and a new AI Silicon Valley VC fund In brief  Ukraine's vice prime minister has confirmed Clearview AI's controversial facial recognition system is being used to identify dead Russian soldiers just weeks after it started using the tech in the conflict.…  ( 9 min )

ECASH Act calls for Treasury to develop electronic currency, no blockchain required House Democrats on Monday plan to introduce a law bill that calls for the development of an electronic version of the US dollar that has the same legal status and privacy expectations as physical currency.…  ( 10 min )

Android messaging heist isn't the action of a well company. Let us help Opinion  One of the joys of academic research is that if you do it right, you can prove the truth. In the case of computer science professor Douglas Leith, this truth is that Google has been taking detailed notes of every telephone call and SMS message made and received on the default Android apps.…  ( 10 min )

...8 years after role in controversial £10bn IT deal with UK tax authority was set to end The UK tax collector has extended its relationship with French IT service provider Capgemini in a £215m contract, which awards the outsourcer work to look after tech provided under the controversial 2004 Aspire contract at least eight years beyond the first proposed end date for the deal.…  ( 9 min )

Forgive the self-taught Visual Basic programmer, for they know not what they do. Or do they? Who, Me?  Thank goodness for code reviews. However things weren't always so squeaky clean as one Register reader discovered while attempting to sort another's sweary source. Welcome to Who, Me?…  ( 9 min )

Teams-like application boasts 500 million users, but Microsoft has more active users Alibaba Cloud has decided to make its DingTalk collaborative workplace platform more attractive to enterprise customers, in China and beyond.…  ( 8 min )

Just look at Ericsson and ISIS, Ashley Yablon says If ZTE and other Chinese giants defy bans on selling American technology to Russia, it will be because they can't help but chase the revenue, says Ashley Yablon, the whistleblower whose evidence led to ZTE being fined for willfully ignoring the US ban on exports to Iran.…  ( 10 min )

COBOL and Itanium to keep the job well into 2023 – past original 2020 go-live date The Australian Securities Exchange (ASX) is attempting to replace its core trading systems with a blockchain-powered alternative – an effort often touted as one of the world's most significant blockchain implementations. Unfortunately, the project has struck trouble, again.…  ( 8 min )

Changes story again to say customers weren't in danger, admits it waited for incident report instead of asking tough questions Identity-management-as-a-service outfit Okta has acknowledged that it made an important mistake in its handling of the attack on a supplier by extortion gang Lapsus$.…  ( 9 min )

First Russian addition to FCC's Very Naughty List apparently unconnected to illegal invasion of Ukraine The United Stations Federal Communications Commission (FCC) has labelled Kaspersky, China Mobile, and China Telecom as threats to national security.…  ( 8 min )

Hackers are compromising WordPress sites to insert a malicious script that uses visitors' browsers to perform distributed denial-of-service attacks on Ukrainian websites. [...]  ( 3 min )

The Ukrainian Security Service (SSU) has announced that since the start of the war with Russia, it has discovered and shut down five bot farms with over 100,000 fake social media accounts spreading fake news. [...]  ( 3 min )

Security hardware manufacturer SonicWall has fixed a critical vulnerability in the SonicOS security operating system that allows denial of service (DoS) attacks and could lead to remote code execution (RCE). [...]  ( 4 min )

SunCrypt, a ransomware as service (RaaS) operation that reached prominence in mid-2020, is reportedly still active, even if barely, as its operators continue to work on giving its strain new capabilities. [...]  ( 4 min )

Microsoft will allow Windows users to block drivers with known vulnerabilities with the help of Windows Defender Application Control (WDAC) and a vulnerable driver blocklist. [...]  ( 3 min )

Meet Satoshi Island, a 32 million square foot private isle giving you access to pristine waters, year-round sunlight, modular homes, and the "promise of a decentralized future." The Satoshi Island we're talking about isn't a tale of fiction, but a real-life private island dedicated to the crypto community. [...]  ( 5 min )

The Commission for Communications and IT at "PCΠΠ", the country's largest entrepreneurship union, has warned about the rising threat of extensive service outages due to a lack of telecom equipment. [...]  ( 5 min )

The distribution of the IcedID malware has returned to notable numbers thanks to a new campaign that hijacks existing email conversations threads and injects payloads that are hard to spot as malicious. [...]  ( 4 min )

Windows 11 version 22H2 aka Sun Valley 2 is set to launch later this year. Unlike the original Windows 11 release, it won't be a massive update with radical design changes. Instead, Sun Valley 2 will be similar to Windows 10 Anniversary Update, so you can expect minor improvements and a few new features. [...]  ( 4 min )

A bookmarklet is a JavaScript-based bookmark that adds to a web browser. I’d like to show you some awesome web browser hacks to aid your web development workflow and how to convert those hacks into time-saving bookmarklets. Activating design mode … 6 Useful Bookmarklets to Boost Web Development originally published on CSS-Tricks. You should get the newsletter.  ( 5 min )

One of the largest and fastest-growing oil production sites in the US is emitting far more methane than previously measured. It’s well known that oil and natural-gas production is a significant source of the powerful greenhouse gas: methane that is trapped underground leaks out from wells and pipelines, and it can also be released intentionally…  ( 3 min )

Since the 1940s, scientists have studied ways to increase rainfall with the goal of increasing precipitation in arid and semi-arid climates. Today, that endeavor is making incredible leaps and bounds as scientists and engineers apply nanotechnology to improve the effectiveness of cloud seeding. “The global water shortage has continuously intensified by rapid population growth and…  ( 9 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Quantum computing has a hype problem As a buzzword, quantum computing probably ranks only below AI in terms of hype. Large tech companies now have substantial research and development efforts in quantum computing.…  ( 4 min )

As a buzzword, quantum computing probably ranks only below AI in terms of hype. Large tech companies such as Alphabet, Amazon, and Microsoft now have substantial research and development efforts in quantum computing. A host of startups have sprung up as well, some boasting staggering valuations. IonQ, for example, was valued at $2 billion when…  ( 6 min )

When it comes to computing ability, the general rule of thumb is more is better. Quantum computers promise to feed this hunger. Their immense processing power derives from their ability to store and handle significantly larger volumes of data than classical bit-driven computers. As a result, a future quantum computer, in theory, could take minutes…  ( 3 min )

In this article, we’ll talk about how to adapt our sites to the different scenarios of a device pointer: whether it has a pointer or not, or how accurate it is. To adapt our site to those devices’ needs we’ll talk about how to properly use media queries `hover`, `pointer`, `any-hover` and `any-pointer`.  ( 14 min )

Das Cloudgroßprojekt Gaia-X wurde als große Hoffnung für die digitale Souveränität gehandelt. Nun scheint dafür kein Geld mehr vorhanden zu sein.  ( 4 min )

Die FinFisher GmbH und zwei weitere Firmen der Unternehmensgruppe haben nach einer Strafanzeige und anschließenden Kontopfändung Insolvenz angemeldet.  ( 4 min )

Eine KI analysiert Bilder, die auf eBay-Kleinanzeigen angeboten werden, nach bestimmten Kriterien. Gestohlene Bikes sollen sich so auffinden lassen.  ( 4 min )

Die Sicherheitstechnik DNSSEC hilft gegen DNS-Umleitungen, verbreitet sich aber nur langsam. Nun schlagen Entwickler Trockenübungen als Anschubhilfe vor.  ( 5 min )

Wer jetzt die vierte Ausgabe der Online-Konferenz am 27. April 2022 bucht, bekommt außer dem Frühbucherrabatt die 20 Videoaufzeichnungen der früheren Auflagen.  ( 3 min )

Seit einem Monat funktioniert Starlink von SpaceX in der Ukraine. Inzwischen ist es offenbar eine wichtige Hilfe bei der Abwehr des russischen Angriffskriegs.  ( 4 min )

Das Paket Swift Async Algorithms baut auf den Erfahrungen vom Combine-Framework auf und setzt Algorithmen mit async/await um.  ( 3 min )

Im PrimeBook Circular steckt ein standardisiertes Rechenmodul, das sich bei veränderten Ansprüchen oder neuen CPU-Generationen wechseln lässt.  ( 4 min )

Sowohl für Debian Bullseye als auch Buster hat das Projekt einen neuen Zwischenstand veröffentlicht. Wer häufig Updates einspielt, braucht nicht aktiv werden.  ( 3 min )

Cyber-Gangster führen sich gegenseitig hinters Licht.  ( 3 min )

Intel stellt die 16-Kern-CPU Core i9-12900KS im Rahmen eines Livestreams vor. Shop-Seiten haben zwischenzeitlich neue Details verraten.  ( 3 min )

Die Bundesanstalt für Finanzdienstleistungsaufsicht warnt vor betrügerischen E-Mails mit vermeintlichen Zahlungsaufforderungen im Namen der BaFin.  ( 3 min )

Mit der am 28. April ausgerichteten Online-Konferenz lernt man die Herausforderungen von Microservices zu meistern. Noch bis 7. April gilt der Frühbucherrabatt.  ( 3 min )

Oliver Winter spricht in dieser Podcast-Episode mit Peter Beck über die Rechte und Pflichten, die ein Product Owner übernehmen muss.  ( 2 min )

Die Internet Security Days kehren im September ins Phantasialand zurück. Vortragsideen für die IT-Security-Fachkonferenz sind noch bis zum 3. April willkommen.  ( 3 min )

Die Firewall von Sophos ist löchrig. Aktualisierte Versionen lösen das Sicherheitsproblem.  ( 3 min )

In zahlreichen Sonicwall-Modellen klafft eine Sicherheitslücke, durch die Angreifer mit manipulierten Paketen Code einschleusen oder das Gerät lahmlegen können.  ( 4 min )

Linux-Server effektiv und umfassend gegen Angriffe absichern – von der Datenverschlüsselung bis zu SELinux. Wochenworkshop; 10 Prozent Rabatt bis 11. April.  ( 3 min )

Der Frühling beschert Sachsen-Anhalt blühende Landschaften. Apple vereint zwei M1-Chips und ARM baut Hunderte Arbeitsplätze ab.  ( 5 min )

Beim Cyberkrieg sind auch Cybergangs involviert. Für die ist die Unterstützung einer Kriegspartei jedoch nicht immer gut fürs Geschäft.  ( 7 min )

A new email phishing campaign has been spotted leveraging the tactic of conversation hijacking to deliver the IceID info-stealing malware onto infected machines by making use of unpatched and publicly-exposed Microsoft Exchange servers. "The emails use a social engineering technique of conversation hijacking (also known as thread hijacking)," Israeli company Intezer said in a report shared with  ( 3 min )

You don't like having the FBI knocking on your door at 6 am in the morning. Surprisingly, nor does your usual cybercriminal. That is why they hide (at least the good ones), for example, behind layers of proxies, VPNs, or TOR nodes. Their IP address will never be exposed directly to the target's machine. Cybercriminals will always use third-party IP addresses to deliver their attacks. There are  ( 4 min )

The operators of the Purple Fox malware have retooled their malware arsenal with a new variant of a remote access trojan called FatalRAT, while also simultaneously upgrading their evasion mechanisms to bypass security software. "Users' machines are targeted via trojanized software packages masquerading as legitimate application installers," Trend Micro researchers said in a report published on  ( 3 min )

Muhstik, a botnet infamous for propagating via web application exploits, has been observed targeting Redis servers using a recently disclosed vulnerability in the database system. The vulnerability relates to CVE-2022-0543, a Lua sandbox escape flaw in the open-source, in-memory, key-value data store that could be abused to achieve remote code execution on the underlying machine. The  ( 3 min )

Die Firewall von Sophos ist löchrig. Aktualisierte Versionen lösen das Sicherheitsproblem.  ( 3 min )

In zahlreichen Sonicwall-Modellen klafft eine Sicherheitslücke, durch die Angreifer mit manipulierten Paketen Code einschleusen oder das Gerät lahmlegen können.  ( 4 min )

The Hive ransomware operation has converted their VMware ESXi Linux encryptor to the Rust programming language and added new features to make it harder for security researchers to snoop on victim's ransom negotiations. [...]  ( 4 min )

Sophos has fixed a critical vulnerability in its Sophos Firewall product that allows remote code execution. Tracked as CVE-2022-1040, the authentication bypass vulnerability exists in the User Portal and Webadmin areas of Sophos Firewall. [...]  ( 4 min )

Okta has admitted that it made a mistake delaying the disclosure hack from the Lapsus$ data extortion group that took place in January. Additionally, the company has provided a detailed timeline of the incident and its investigation activities. [...]  ( 5 min )

Der Drohnenkrieg ist laut US-Whistleblowern ohne umfassendes Computer- und Speichernetzwerk dahinter nicht denkbar. Neben Big Tech mische SpaceX kräftig mit.  ( 4 min )

Internetsurfer in Deutschland verbrauchten 2021 fast doppelt so viel Datenvolumen wie zwei Jahre zuvor. Schätzungen zufolge waren es 100 Milliarden Gigabyte.  ( 3 min )

Es ist die größte jemals getätigte Investition in Sachsen-Anhalt: Am Stadtrand von Magdeburg entsteht ab 2023 eine Intel-Fab.  ( 7 min )

Im März erweiterte Apple seine Produktlinie um den ungewöhnlichen Doppel-Chip M1 Ultra, der den neuen Mac Studio zu Workstation-Leistungen treibt.  ( 7 min )

Zigbee gehört zu den populärsten Funktechnologien im Smart-Home-Bereich. Insgesamt unterstützen mehr als 400 Hersteller mit über 4000 Produkten die Technologie.  ( 4 min )

Die Staatsanwaltschaft Göttingen ermittelt in einem Fall von Internetkriminalität. Der Schaden liegt allein in Niedersachsen bei über drei Millionen Euro.  ( 4 min )

Google hat neue Versionen vom Webbrowser Chrome veröffentlicht, die eine Sicherheitslücke schließen, für die bereits Exploit-Code existiert.  ( 3 min )

Onlineshopping ist für viele selbstverständlich – doch nicht jedes Angebot ist seriös. c’t uplink hilft Fake-Shops und falsche Schnäppchen zu entlarven.  ( 3 min )

Das BSI hält den Virenschutz von Kaspersky angesichts der aktuellen Lage in Russland nicht länger für tragbar. Kaspersky sieht das anders. Was jetzt zu tun ist.  ( 7 min )

The Cybersecurity and Infrastructure Security Agency (CISA) has added a massive set of 66 actively exploited vulnerabilities to its catalog of 'Known Exploited Vulnerabilities.' [...]  ( 4 min )

Western Digital has fixed a critical severity vulnerability in the Samba vfs_fruit VFS module that enabled attackers to gain remote code execution with root privileges on unpatched My Cloud OS 5 devices. [...]  ( 3 min )

Western Digital has fixed a critical severity vulnerability in the Samba vfs_fruit VFS module that enabled attackers to gain remote code execution with root privileges on unpatched My Cloud OS 5 devices. [...]  ( 3 min )

'Competition is critical to our success,' says US agency boss NASA is offering a second lucrative contract to fund a lunar lander for its upcoming mission to put men and the first woman on the Moon, it announced this week.…  ( 8 min )

As more and more biz pays up to restore data, we're told Ransomware is among the most feared of the myriad cyberthreats circulating today, putting critical data at risk and costing some enterprises tens of millions of dollars in damage and ransoms paid. However, ransomware doesn't occur in a vacuum, according to security startup Lumu Technologies.…  ( 10 min )

Or: What kind of research Google's getting in its Mandiant takeover GTC  Disassembling and analyzing malware to see how it works, what it's designed to do and how to protect against it, is mostly a long, manual task that requires a strong understanding of assembly code and programming, techniques and exploits used by miscreants, and other skills that are hard to come by.…  ( 10 min )

The U.S. Federal Communications Commission (FCC) on Friday moved to add Russian cybersecurity company Kaspersky Lab to the "Covered List" of companies that pose an "unacceptable risk to the national security" of the country. The development marks the first time a Russian entity has been added to the list that's been otherwise dominated by Chinese telecommunications firms. Also added alongside  ( 3 min )

A Chinese-speaking threat actor called Scarab has been linked to a custom backdoor dubbed HeaderTip as part of a campaign targeting Ukraine since Russia embarked on an invasion last month, making it the second China-based hacking group after Mustang Panda to capitalize on the conflict. "The malicious activity represents one of the first public examples of a Chinese threat actor targeting Ukraine  ( 3 min )

Google on Friday shipped an out-of-band security update to address a high severity vulnerability in its Chrome browser that it said is being actively exploited in the wild. Tracked as CVE-2022-1096, the zero-day flaw relates to a type confusion vulnerability in the V8 JavaScript engine. An anonymous researcher has been credited with reporting the bug on March 23, 2022. Type confusion errors,  ( 3 min )

Google hat neue Versionen vom Webbrowser Chrome veröffentlicht, die eine Sicherheitslücke schließen, für die bereits Exploit-Code existiert.  ( 3 min )

The Federal Communications Commission (FCC) added Russian cybersecurity firm Kaspersky to its Covered List, saying it poses unacceptable risks to U.S. national security. [...]  ( 3 min )

With the US providing military aid to Ukraine and its sanctions damaging the Russian economy, the US government disclosed this week that there is intelligence that Russia is preparing for potential cyberattacks against US interests. [...]  ( 6 min )

Google has released Chrome 99.0.4844.84 for Windows, Mac, and Linux users to address a high-severity zero-day bug exploited in the wild. [...]  ( 3 min )

Threat analysts report having spotted a change in the operations of the Muhstik threat group, which has now switched to actively exploiting a Lua sandbox escape flaw in Redis. [...]  ( 3 min )

The cybercrime group behind the development of the Racoon Stealer password-stealing malware has suspended its operation after claiming that one of its developers died in the invasion of Ukraine. [...]  ( 4 min )

Maksim Berezan, an Estonian man linked to multimillion-dollar ransomware attacks, was sentenced on Friday to 66 months in prison for his involvement in online fraud schemes. [...]  ( 3 min )

Bug bounty platform HackerOne disabled Kaspersky's bug bounty program on Friday following sanctions imposed on Russia and Belarus after the invasion of Ukraine. [...]  ( 3 min )

A set of flaws affecting the world's leading messaging and email platforms, including Instagram, iMessage, WhatsApp, Signal, and Facebook Messenger, has allowed threat actors to create legitimate-looking phishing URLs for the past three years. [...]  ( 5 min )

Microsoft says Windows 7 recovery discs created using the Control Panel Backup and Restore app will fail to start after installing Windows updates released since January 11, 2022. [...]  ( 3 min )

Researchers have disclosed a 'replay attack' vulnerability affecting select Honda and Acura car models, that allows a nearby hacker to unlock and start your car wirelessly. Honda has no plans to fix the issue in older models at this time. [...]  ( 5 min )

Modern phishing kits sold on cybercrime forums as off-the-shelve packages feature multiple and sophisticated detection avoidance and traffic filtering systems to ensure that internet security solutions won't mark them as a threat. [...]  ( 4 min )

Morgan Stanley Wealth Management, the wealth and asset management division of Morgan Stanley, says some of its customers had their accounts compromised following vishing attacks. [...]  ( 4 min )

Think about Tesla charging extra for features like Autopilot, then look at your GPU card, and you'll get the idea GTC  Nvidia has laid out a roadmap of sorts to a trillion dollars in revenue.…  ( 10 min )

Full-stack approach has big plans Nvidia's has laid out a roadmap to a trillion in revenue in the future, and that company's serving of software alongside chips could put a dent on your wallet.…  ( 10 min )

Conti, REvil declared most active criminal gangs The average ransom demand hit $2.2 million in 2021, a 144 percent rise from the year prior, according to Palo Alto Networks' Unit 42 consultants, while the average ransom payment grew 78 percent to $541,010.…  ( 11 min )

Conti, REvil remain most active criminal gangs The average ransom demand hit $2.2 million in 2021, a 144 percent rise from the year prior, according to Palo Alto Networks' Unit 42 consultants, while the average ransom payment grew 78 percent to $541,010.…  ( 11 min )

Ex-senior director also claims Feds have seen evidence and done nothing Yasser Elabd, who formerly served as a senior director at Microsoft, has accused the Windows giant of paying illegal bribes to close business deals in the Middle East and Africa.…  ( 10 min )

CSPs, social giants behind bulk of colocation leasing activity in 2021 Datacenter demand is booming in North America as the economy recovers from the coronavirus pandemic, according to a report from CBRE.…  ( 8 min )

Nvidia says it has sped up NeRF rendering to mere tenths of a millisecond Nvidia has hashed out a new approach to neural radiance field (NeRF) technology that will generate a fully rendered 3D scene from just a few still photos, all in a matter of seconds, including model training time.…  ( 9 min )

Cluster tech vulnerability means either patching or port tinkering could be on the cards Atlassian has demonstrated the interconnectedness of all things with a warning that some versions of Bitbucket Data Center and Confluence Data Center require patching courtesy of the Hazelcast Java deserialization vulnerability.…  ( 8 min )

Any models made between 2016 and 2020 can have key fob codes sniffed and re-transmitted If you're driving a Honda Civic manufactured between 2016 and 2020, this newly reported key fob hijack should start your worry engine.…  ( 8 min )

EU and US reach agreement on transatlantic data sharing, but court challenges ahead The US and the EU have reached an agreement to enhance Privacy Shield following almost two years of work since the European Court of Justice struck down the data-sharing arrangement in 2020.…  ( 9 min )

Owner SoftBank pursues valuation higher for the chip designer than Nvidia's initial offer Goldman Sachs is reportedly lined up to be the lead underwriter for Arm's public offering in a move expected to value the chip designer at up to $60bn, higher than the purchase price first offered by Nvidia.…  ( 8 min )

Digital Markets Act rules agreed, set to include fines of up to 10% of turnover and power to break up businesses Sanctions for non-compliance with new EU powers could hit tech giants with fines of up to 10 percent of their worldwide turnover – that's around $21.bn in the case of dominant online retailer Amazon.…  ( 10 min )

You can now read your comics in the metaverse Something for the Weekend?  Here lie the bones of Good Ideas: child of impressionable managers, twin of floundering projects, much-beloved parent to scope creep. We will miss you. Not.…  ( 11 min )

SMEs' software spending subsidy continues As the UK's Chancellor of the Exchequer struggles to bring cheer to the nation's greatest cost of living crisis in 50 years, he let slip a few nuggets for the tech industry.…  ( 8 min )

Robo-worker manipulates test tubes and pipettes, images skin cells to classify disease A robotic system armed with AI-powered cameras can grow and image skin cells from test tubes to diagnose Parkinson's disease with minimal human help, according to researchers from Google and the New York Stem Cell Foundation.…  ( 9 min )

Looks like a job for ... Spotting the Obvious man! (I see you baby, shaking that mouse) On Call  You know that plumber who charges hundreds to just to change a magic washer? The IT world can be the same, where seemingly magical skills are grounded in the most mundane of realities. Welcome to Contractor Time in On Call.…  ( 9 min )

BigScience is a collaborative effort by developers volunteering to make ML research more accessible GTC  BigScience – a team made up of roughly a thousand developers around the world – has started training its 176-billion-parameter open-source AI language model in a bid to advance research into natural language processing (NLP).…  ( 8 min )

Poisoned SCADA apps could have disrupted power supply – perhaps even at nuclear plants The United States Department of Justice has unsealed a pair of indictments that detail alleged Russian government hackers' efforts to use supply chain attacks and malware in an attempt to compromise and control critical infrastructure around the world – including at least one nuclear power plant.…  ( 9 min )

Did lessons learned from South Korea make it all less scary? Google has revealed a shift of policy that means it is inclined to allow third-party party payment systems access to its Play Store.…  ( 8 min )

Security software vendor saddened but says its channel is holding firm Australian technology distributor Dicker Data has decided to end its commercial relationship with Russian security software vendor Kaspersky.…  ( 8 min )

Never mind those flashy GPUs, MCU drought hits health to automotive The global semiconductor shortage has engineers scrambling to acquire replacement parts, cancelling projects, or redesigning hardware from scratch, distributor Avnet revealed this month.…  ( 8 min )

Fake Oracle and Disney job ads to lure victims is certainly an interesting choice Google on Thursday described how it apparently caught and thwarted North Korea's efforts to exploit a remote code execution vulnerability in Chrome.…  ( 8 min )

COVID saw sales surge, but there's less reason to buy in the new normal The APAC region's market for traditional PCs - desktops notebooks and workstations - grew 15.9 per cent year-on-year in 2021 to 120.3 million units, but shipments appear to have peaked according to analyst firm IDC.…  ( 8 min )

Another day, another attack on the software supply chain A group of more than 200 malicious npm packages targeting developers who use Microsoft Azure has been removed two days after they were made available to the public.…  ( 9 min )

And machine learning that flags your CEO as suspicious GTC  Weaponized AI that goes beyond Zelenskyy deepfakes and is keeping some security researchers and data scientists up at night.…  ( 10 min )

Bitcoin millionaire teen said to be among those detained British cops investigating a cyber-crime group have made a string of arrests.…  ( 9 min )

Auf der britischen Fachmesse BETT zeigen Medion und jp.ik ihr Konzept für ein Notebook mit Raspberry Pi Compute Module CM4 - wohl als Versuchsballon.  ( 4 min )

Dass Apples M1-Prozessoren schnell sind, ist bekannt. Aber sind sie in der Praxis wirklich schneller und effizienter als Windows-Workstations?  ( 9 min )

Unser werktäglicher News-Überblick fasst die wichtigsten Nachrichten des Tages kurz und knapp zusammen.  ( 4 min )

Der NUC-Konkurrent Brix Extreme erscheint mit Intels "Alder Lake"-Prozessoren und soll besonders leise arbeiten.  ( 3 min )

Epic habe keine Beweise für Apples angebliche Monopolmacht erbringen können, so der iPhone-Hersteller. Das Urteil müsse in zweiter Instanz bestätigt werden.  ( 4 min )

Unsere Übersicht kleiner, aber interessanter Meldungen enthält diese Woche unter anderem GitHub, Node.js, VS Code und glückliche Entwickler.  ( 4 min )

Um in ihre Rechner einzubrechen, haben nordkoreanische Angreifer Opfer auf fingierte Webseiten gelockt, die eine Sicherheitslücke in Google Chrome missbrauchen.  ( 5 min )

Arbeitgeber suchen derzeit vor allem nach Go-Programmierern. Security-Expertinnen und -Experten sind ebenfalls sehr gefragt und erzielen die höchsten Einkommen.  ( 4 min )

Deutsch-österreichische Forschungsteams zeigen, dass bei den Taktfrequenzen optoelektronischer Schaltelemente noch viel Luft nach oben ist.  ( 4 min )

AWS und Microsoft Azure haben fast gleichzeitig neue Angebote für Spieleentwicklung in der Cloud auf den Markt gebracht, Azure sogar eine Virtuelle Maschine.  ( 5 min )

Es taucht immer mehr Malware auf, die das Windows Subsytem for Linux (WSL) als Einfallstor nutzen. Die Gefahr steigt, warnen Sicherheitsforscher.  ( 4 min )

Die dritte Auflage der Fachkonferenz und IT-Job-Messe findet parallel zur secIT in Hannover statt. Es präsentieren sich mehr als zehn attraktive Unternehmen.  ( 3 min )

Der ganze Tag voller Videoanrufe, endlose Diskussionen – die meisten Teilnehmer lassen Meetings nur noch über sich ergehen. Doch das muss nicht sein.  ( 6 min )

Die halbtägige Online-Veranstaltung am 26. April beschäftigt sich mit den Schwachstellen in der Softwarelieferkette und Maßnahmen, um sie abzusichern.  ( 3 min )

Es gibt ein wichtiges Sicherheitsupdate für verschiedene NAS-Modelle von Western Digital.  ( 3 min )

Apple plant mehr Auswahl bei seinem Einsteiger-Notebook. Davon geht ein bekannter Display-Analyst aus. Allerdings brauchen Kunden noch Geduld.  ( 4 min )

Das Hacker-Kollektiv Anonymous gibt an, Daten bei Nestlé kopiert und veröffentlicht zu haben. Nestlé widerspricht: Das sei man selbst gewesen.  ( 3 min )

Am Donnerstag kam es zeitweise zu einem merkwürdigen Fehlerbild bei iMessage: Textversand ging, Bilder nicht. Betroffen waren zudem Fotos und der Schlüsselbund.  ( 4 min )

Am 18. Mai lernen Admins, wie sie SharePoint Online einrichten und welche Regeln und Best Practices sie für einen erfolgreichen Einsatz kennen müssen.  ( 4 min )

Tausende Rechner aus dem Energiesektor in über hundert Ländern hätten die russisch-staatlichen Einbrecher kompromittiert. Nun erhebt die US-Justiz Anklage.  ( 4 min )

Manch kleines und mittelständisches Unternehmen in Mecklenburg-Vorpommern tut sich schwer mit der Digitalisierung, auch Budgets würden zu knapp kalkuliert.  ( 3 min )

Um den Leistungshunger kommender Pixelbeschleuniger zu befriedigen, dürfen zukünftige PC-Netzteile kurzzeitig bis zum Doppelten der Nennleistung schlucken.  ( 5 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. We spoke to a radiation expert in Kyiv about the current nuclear accident risk Russian troops have been bringing death and destruction to Ukraine since they invaded on February 24. But there’s a…  ( 4 min )

Russian troops have been bringing death and destruction to Ukraine since they invaded on February 24. But there’s a risk they could cause a nuclear accident too, according to Vadim Chumak, head of the external exposure dosimetry lab at Ukraine’s National Research Center for Radiation Medicine in the country’s capital, Kyiv. Russia has taken control…  ( 8 min )

In the past months, there have been lots of talks dedictaed to Remix. Routing is not only one of the things that sets it apart from other frameworks, but it also fuels great performance and improves the overall experience for developers. Let’s dig in to all of the features that build up routing in this powerful framework.  ( 10 min )

The U.S. government on Thursday released a cybersecurity advisory outlining multiple intrusion campaigns conducted by state-sponsored Russian cyber actors from 2011 to 2018 that targeted the energy sector in the U.S. and beyond. "The [Federal Security Service] conducted a multi-stage campaign in which they gained remote access to U.S. and international Energy Sector networks, deployed  ( 3 min )

The City of London Police has arrested seven teenagers between the ages of 16 and 21 for their alleged connections to the prolific LAPSUS$ extortion gang that's linked to a recent burst of attacks targeting NVIDIA, Samsung, Ubisoft, LG, Microsoft, and Okta. The development, which was first disclosed by BBC News, comes after a report from Bloomberg revealed that a 16-year-old Oxford-based  ( 3 min )

Researchers have blown the lid off a sophisticated malicious scheme primarily targeting Chinese users via copycat apps on Android and iOS that mimic legitimate digital wallet services to siphon cryptocurrency funds. "These malicious apps were able to steal victims' secret seed phrases by impersonating Coinbase, imToken, MetaMask, Trust Wallet, Bitpie, TokenPocket, or OneKey," said Lukáš Štefanko  ( 4 min )

Google's Threat Analysis Group (TAG) on Thursday disclosed that it acted to mitigate threats from two distinct government-backed attacker groups based in North Korea that exploited a recently-uncovered remote code execution flaw in the Chrome web browser. The campaigns, once again "reflective of the regime's immediate concerns and priorities," are said to have targeted U.S. based organizations  ( 4 min )

Es gibt ein wichtiges Sicherheitsupdate für verschiedene NAS-Modelle von Western Digital.  ( 3 min )

The U.S. has indicted four Russian government employees for their involvement in hacking campaigns targeting hundreds of companies and organizations from the global energy sector between 2012 and 2018. [...]  ( 4 min )

Western Digital has released new My Cloud OS firmware to fix a vulnerability exploited by bug hunters during the Pwn2Own 2021 hacking competition to achieve remote code execution. [...]  ( 4 min )

As Lapsus$ data extortion gang announced that several of its members are taking a vacation, the City of London Police say they have arrested seven individuals connected to the gang. [...]  ( 4 min )

Researchers report a new version of the JSSLoader remote access trojan being distributed malicious Microsoft Excel addins. [...]  ( 4 min )

The independent communications authority of South Africa (ICASA) has submitted a radical proposal to tackle the problem of SIM swapping attacks in the country, suggesting that local service providers should keep biometric data of cellphone number owners. [...]  ( 5 min )

North Korean state hackers have exploited a zero-day, remote code execution vulnerability in Google Chrome web browser for more than a month before a patch became available, in attacks targeting news media, IT companies, cryptocurrency and fintech organizations. [...]  ( 4 min )

Microsoft has addressed a new known issue causing DNS stub zones loading failures that could lead to DNS resolution issues on Windows Server 2019 systems. [...]  ( 3 min )

GitHub says recent service outages were caused by resource contention issues in their primary database cluster. [...]  ( 4 min )

Recently, FortiGuard Labs released the latest Global Threat Landscape Report for the second half of 2021. There is a ton of data in it and several key takeaways. The main themes that weave through this report are about the increase in cybercriminal sophistication as well as speed. [...]  ( 7 min )

A Russian national has been indicted by the US DOJ and added to the FBI's Cyber Most Wanted list for allegedly creating and managing a cybercrime marketplace. [...]  ( 4 min )

Putting silicon in the cloud so you can design silicon in the cloud The continued march of chip design tools into the cloud has received another endorsement, this time from GlobalFoundries, the fourth largest chip manufacturer in the world.…  ( 8 min )

For all those worried about the Firefox maker, now you can chip in five or ten bucks a month The Mozilla Developer Network, which hosts free, open access to web standard documentation, tools, samples and other good stuff, is going pay-for-play with a premium subscription plan that adds new personalization features. …  ( 8 min )

Tesla, Porche, jewelry, bags, purses, watches, the whole works A now-former HP finance planning manager pleaded guilty on Wednesday to charges of wire fraud, money laundering, and filing false tax returns that follow from the misappropriation of company funds.…  ( 8 min )

Vitess-based database splits system for 30 minutes allowing users to right regrettable changes Distributed transaction database biz PlanetScale has introduced an "undo" button it says can reverse schema changes, allowing devs to avoid embarrassing disasters by reverting to the original design without losing data within a 30-minute window.…  ( 8 min )

French research giant, C12 see challenges, but prototype slated for 2024 Here's something we will only believe once we see it: A quantum computing chip the size of a large silicon wafer.…  ( 8 min )

China's Twitter analog is latest in SEC crosshairs over audits Weibo, the Chinese equivalent to Twitter, has been added to an SEC roll of companies that may be delisted due to inaccessible audits. Surprisingly, China seems to be taking DC's side.…  ( 7 min )

All-cash Veoneer deal's real target is full ownership of Arriver vehicle vision stacks Chipmaker Qualcomm is set to acquire Swedish automotive technology company Veoneer next week in a complex deal to bolster Qualcomm’s driver assistance and autonomous vehicle portfolio.…  ( 7 min )

It was MySQL, with the resource contention, in the database cluster Code shack GitHub is offering an explanation for a succession of lengthy outages this month - it's the fault of resource contention issues in its primary database cluster during peak loads but more investigation is needed.…  ( 8 min )

Absolutely Fabless: A good year for those who don't make the things themselves 2021 was a fabulous year for the largest global fabless chip designers, thanks to ongoing global chip shortage that caused silicon prices to spike, according to a new report from TrendForce.…  ( 8 min )

Major spec refresh includes 600 watt connector for GPUs Intel has detailed new ATX power supply unit (PSU) specifications that it says are designed to support the demands of upcoming PCIe Gen-5 graphics cards, while also delivering greater efficiency.…  ( 8 min )

Small, self-described sample, sure. But results show shifts over time. Nevermind what enterprise programmers are trained to do, a self-defined set of hackers has its own programming language zeitgeist, one that apparently changes with the wind, at least according to the relatively small set surveyed.…  ( 8 min )

Reports suggest Digital Markets Act could hit a broader sweep of players than the FAANG gang The European Union is to launch a legislative process that is set to enforce greater competition among the leading digital platform providers.…  ( 8 min )

Bored of the bleeding edge? Come over and be bored in beta instead Windows Insiders weary of life on the bleeding edge can now opt for a more stable existence as the Dev and Beta channels briefly synchronize.…  ( 7 min )

That's no quadcopter... that's a... cooling system? Apple's latest and greatest – the Mac Studio – has come under the gaze of teardown merchants, iFixit. The good news? There might be hope for storage swappers. The bad news? Everything else.…  ( 7 min )

Info of those signing up to be soldiers leaked, as sources finger Capita-run system The UK Ministry of Defence has suspended online application and support services for the British Army's Capita-run Defence Recruitment System and confirmed to us that digital intruders compromised some data held on would-be soldiers.…  ( 10 min )

Investment sentiment for S/4HANA drops off while public cloud hosting only two per cent of environments Investment sentiment in S/4HANA, SAP's in-memory ERP platform, is falling for the first time among the software giant's German-speaking users.…  ( 8 min )

Multiple systems remain down as spokesperson confirms 'security incident' was cyber attack Edinburgh's Heriot-Watt University has entered a second week of woe following a vist by an infosec nasty.…  ( 8 min )

Regulators worry about financial stability if binary Baht spread Thailand's Securities and Exchange Commission (SEC) announced on Wednesday a ban on using cryptocurrencies and other digital assets as a means of making payments.…  ( 8 min )

Thank you, Stephen E. Wilhite for your seminal image format, and John Roach for your pioneering microcomputer Two important figures in computing industry have passed away.…  ( 8 min )

Evolving threat environment means preventative AI – and SmartNICs – are needed to improve protection GTC  Check Point Software has put Nvidia GPUs and artificial intelligence techniques to work across its broad portfolio of security tools in order to address and adapt better to an increasingly sophisticated and rapidly changing threat environment.…  ( 9 min )

Will bring bots to workflow users, perhaps not with the same precision RPA specialists muster Workflow specialist ServiceNow has announced a heavy emphasis on robotic process automation (RPA) in the next release of its platform, to get aging applications working with each other in a more user-friendly fashion.…  ( 8 min )

Back to the drawing board for company plagued by years of scandals Toshiba's shareholders have rejected both the company's plan to split into two companies and a proposal to look for a private buyer.…  ( 8 min )

Plans more SaaS and PaaS, and to stop selling IaaS at a loss Tencent has decided to stop spending whatever it takes to increase its cloud revenue.…  ( 9 min )

25 per cent CAGR will see $87 billion a year spent by 2026, says Canalys Mainland China's cloud infrastructure services market – covering both infrastructure as-a-service and platform as-a-service – is expected to grow to $84.7 billion by 2026, according to market analyst firm Canalys.…  ( 8 min )

CEO tells The Reg of new branding ahead of Finnish vendor's corporate split F-Secure's enterprise-facing business will have a new brand – WithSecure – and a sharpened focus when the company splits into two independent operations.…  ( 9 min )

Big Blue efforts to protect sensitive docs thwarted by mass of litigants Confidential IBM documents presented in court as evidence to support claims Big Blue systematically shed older workers – documents subsequently placed under seal – have now publicly surfaced in one of the many ongoing age discrimination lawsuits against the IT giant.…  ( 9 min )

Gelsinger also confirms he's ended multi-billion share-buyback scheme Intel CEO Pat Gelsinger on Wednesday urged US Congress yet again to pass $52 billion in funding swiftly to boost America's semiconductor industry – and said Wall Street's negative response to his costly manufacturing expansion plan is proof Intel is worthy of the subsidies.…  ( 10 min )

Matching TSMC is not for the faint of heart, though, Huang warns GTC  Nvidia is considering expanding its supplier base by getting at least some of its chips made in Intel factories.…  ( 11 min )

Miscreants can exploit these to make a bad situation much worse VMware has patched two security flaws, an OS command injection vulnerability and a file upload hole, in its Carbon Black App Control security product running on Windows.…  ( 8 min )

Cyber-souk offered bundle deals of account access and credit card info, says Uncle Sam A Russian national was indicted in the US on Tuesday for allegedly running an online marketplace selling access to credit card, shopping, and web payment accounts belonging to tens of thousands of victims.…  ( 8 min )

As in encryption, not coins, thankfully IBM has unveiled a cloud-based key management service that should make it easier for organizations to manage encryption keys across complex multi-cloud hybrid environments, as well as on-premises.…  ( 8 min )

In Großbritannien sind sieben Teenager in Verbindung mit Ermittlungen zur Lapsus$-Gruppe festgenommen worden. Ein 16-Jähriger soll Kopf der Gruppe sein.  ( 4 min )

Der ukrainische Vizepremierminister Fedorov will mithilfe der Gesichtserkennungssoftware der umstrittenen US-Firma Clearview AI getötete Russen identifizieren.  ( 4 min )

Apples Auslagerung von Nutzerdaten etwa auf Google-Server sei Täuschung, so die Sammelklage. Eine Millionenzahlung von Apple beendet das Verfahren.  ( 4 min )

In fast allen Apple-Geräten steckt Aluminium. Recycling und ein neuer Produktionsprozess sollen die Produktion klimafreundlicher machen.  ( 4 min )

GeForce-Grafikkarten könnten künftig auch mit Intels Fertigungstechnik erscheinen – beide Firmen sprechen offenbar schon miteinander.  ( 4 min )

Das Quantentechnologie- und KI-Unternehmen Sandbox löst sich von Alphabet. Hinter der Finanzierung stehen prominente Tech-Investoren.  ( 3 min )

Dank aktueller Prozessoren von Intel und Grafikkarten von Nvidia verspricht Lenovo deutlich mehr Leistung für seine neue ThinkStation-Generation.  ( 4 min )

Die Deutsche Commercial Internet Exchange will mit einem Leipziger Internetknoten die ostdeutschen Bundesländer für Unternehmen interessanter machen.  ( 3 min )

Nach Aktualisierung des Betriebssystems funktionieren externe Bildschirme bei manchen Mac-Nutzern nicht mehr richtig. Es gibt weitere Bugs.  ( 4 min )

Ein Sicherheitsforscher stellt einen erweiterten Phishing-Ansatz zum Einkassieren von Passwörtern vor. Betrüger sollten jetzt aufhören zu lesen.  ( 4 min )

BMI und Bitkom einigen sich auf einen neuen Vergabevertrag. Ein Multi-Cloud-Ansatz soll die öffentliche Verwaltung mit SaaS und Managed Cloud Services erneuern.  ( 3 min )

An drei Terminen im Mai und Juni lernen Interessierte in 12 praxisnahen Stunden, ihr Projektmanagement zu meistern.  ( 4 min )

Vergütungsansprüche für Privatkopien bestehen laut dem Europäischen Gerichtshof prinzipiell auch in der Cloud – bereits getätigte Zahlungen seien zu prüfen.  ( 4 min )

Apache Drill bringt eine Rückportierung zu Hadoop 2 und eine Anbindung an die Datenbank-Engine Apache Phoenix. Auch neue Dateiformate sind nun möglich.  ( 3 min )

Mircosoft hat das Plattform-Update 22H2 (Build 22581) für Windows 11 zeitgleich als Insider-Preview im Entwickler- sowie im Beta-Kanal veröffentlicht.  ( 4 min )

Ein Gespräch mit Christian Schlierf von der Technikerschule Neumarkt über modernen Unterricht.  ( 7 min )

Lernen Sie an einem Tag, wie Sie unternehmensinterne Kompetenzen für eine erfolgreiche Cloud-Transformation aufbauen. Bis 7.4. mit 10 Prozent Frühbucherrabatt.  ( 3 min )

Die Social-Media-Dienst Instagram beendete 2016 die Anzeige des Instagram-Feeds in chronologischer Reihenfolge. Nun gibt es sie wieder.  ( 3 min )

Der Reparaturdienstleister hat die kleine Workstation auseinandergenommen. Dabei ergaben sich einige interessante Details.  ( 4 min )

Der Einsatz von S/4HANA nimmt zu, aus der SAP-Cloud beziehen Anwender am liebsten SuccessFactors. Dagegen reißt das Lockangebot RISE die Wenigsten vom Hocker.  ( 4 min )

Sicherheitsforscher haben die Stoppuhr gezückt und Ransomware bei der Arbeit beobachtet.  ( 3 min )

heise Developer präsentiert software-architektur.tv, den Videocast von Eberhard Wolff und Lisa Moritz. Qualitätsanforderungen nach Kundenmaß stehen im Fokus.  ( 4 min )

Als erstes deutsches Hochleistungsrechenzentrum hat das KIT Graphcore-Technik installiert, nun bietet es KI-Forschungsprojekten Zugang zu den Ressourcen.  ( 6 min )

Der Antivirenhersteller F-Secure splittet sich in Business- und Konsumenten-Bereich auf. Die Business-Einheit erhält den Namen WithSecure.  ( 3 min )

Wichtige Sicherheitsupdates schließen zwei kritische Lücken in Carbon App Control für Windows.  ( 3 min )

Die Fachkonferenz Team Up! unterstützt am 31. März die Teamentwicklung – für alle, die End-to-End-Verantwortung tragen. Jetzt noch rasch Tickets sichern.  ( 4 min )

Nachdem der Regulierungsstreit mit der EU-Kommission ausgestanden scheint, soll die Schonfrist bei der Umsetzung des Medienstaatsvertrags nun vorbei sein.  ( 5 min )

Der Kreml will viele IT-Fachkräfte vom Militärdienst freistellen. Das soll die IKT-Infrastruktur stützen und den Wegzug ins Ausland bremsen.  ( 3 min )

Mit dem Gesetzentwurf für eine allgemeine Impfpflicht sollen die Versicherten auch flächendeckend mit der ePA ausgestattet werden. Der GKV-Verband ist dagegen.  ( 4 min )

Out of them, 84,000 are children, according to the Verkhovna Rada Commissioner for Human Rights Lyudmyla Denisova. Ukraine is not yet able to verify these statistics, but the Ukrainian government is investigating the removal of 2,389 children from Ukraine. The post Russia claims to have ‘evacuated’ 402,000 Ukrainians to Russia. appeared first on The Kyiv Independent.  ( 1 min )

In retaliation for the expulsion of most of Ukraine’s diplomatic mission to Belarus, Ukraine will officially reduce the diplomatic staff of the embassy in Kyiv to just five diplomats, according to Ukraine’s Foreign Ministry spokesman Oleg Nikolenko. Ukraine will also close the consulate of Belarus in Lviv. The post Ukraine mirrors Belarusian expulsion of diplomats. appeared first on The Kyiv Independent.  ( 1 min )

Russian forces fired Tornado rockets at civilians in the village of Yavkyne, where IDPs from neighboring villages had gathered. The attack also damaged a building, according to the Bashtan City Council. The post Shelling kills 3, injures 13 in Mykolayiv Oblast. appeared first on The Kyiv Independent.  ( 1 min )

He also called on G7 countries to block Russia from the Global Positioning System (GPS) and impose an embargo on all trade with Russia. Russia’s frozen assets should be used to pay reparations to Ukraine, he added. The post Zelensky urges G7 to fully block Russia’s central bank, other banks. appeared first on The Kyiv Independent.  ( 1 min )

The bill would also exempt the owners of residential real estate in areas affected by the war from paying a property tax for 2021-2022. The post Ukrainian parliament abolishes customs tariffs, value-added tax for imports during war. appeared first on The Kyiv Independent.  ( 1 min )

Paweł Majewski, head of Polish largest oil and gas company, said that the contract with Gazprom envisions the payment method and Poland won’t change it. Russian dictator Vladimir Putin has previously demanded that the European Union switch its payments for Russian gas from dollars to rubles. The post Poland won’t pay for Russian gas in rubles says CEO of PGNiG. appeared first on The Kyiv Independent.  ( 1 min )

Deputy Prime Minister Iryna Vereshchuk added that 11 Russian sailors saved by Ukraine from a sunken ship would be exchanged for 19 Ukrainian sailors captured by Russia. The post Deputy Prime Minister: 10 Russian prisoners of war exchanged for 10 Ukrainian soldiers. appeared first on The Kyiv Independent.  ( 1 min )

A senior U.S. official told CNN that the country’s position has not changed on the matter. Earlier, President Volodymyr Zelensky asked NATO for “one percent of all (their) planes,” later adding, “you have thousands of fighter jets, but we have not been given one yet.” The post CNN: US still opposed to providing fighter jets to Ukraine appeared first on The Kyiv Independent.  ( 1 min )

According to a joint statement by NATO countries, the use of chemical or biological weapons by Russia will lead to severe consequences for the Kremlin. The statement didn’t specify the consequences. The post NATO to protect Ukraine from chemical, biological, nuclear threats. appeared first on The Kyiv Independent.  ( 1 min )

STOYANKA-2, Kyiv Oblast – In the village of Stoyanka-2 outside Kyiv, a half-dozen cars line the road, riddled with holes, their bodywork mangled by bullets and an explosion.  Their windows, bearing handwritten Ukrainian signs saying “Children” are perforated or shattered. The suitcases inside the vehicles appear to have been searched. […] The post Inside massacre of civilian evacuees outside Kyiv appeared first on The Kyiv Independent.  ( 7 min )

According to the local governor Serhiy Haidai, Russian forces attacked towns in Luhansk Oblast with missiles and phosphorus bombs that are banned to use against civilians by the Geneva Conventions. 31 buildings were damaged or completely destroyed. The post 4 killed by Russian overnight shelling in Luhansk Oblast. appeared first on The Kyiv Independent.  ( 1 min )

As Russian bombs and rockets land on Kyiv’s residential buildings, the city’s utility services’ workers drudge overtime to clear the streets of the damage, debris and garbage left behind in the wake of Russia’s attacks.  As many as 4,000 homes across Ukraine have been damaged by Russia’s military since the […] The post Fearless Kyiv utility workers keep the city running under Russia’s shelling appeared first on The Kyiv Independent.  ( 5 min )

The Ukrainian military have also destroyed 530 Russian tanks, 1,597 armored vehicles, 1,033 cars, 280 artillery systems, 82 multiple rocket launchers, 47 surface-to-air missiles, at least 108 jets, 124 helicopters, 4 boats, 72 fuel tanks, and 50 drones. The post Ukraine’s military: 15,800 Russian troops killed since Feb. 24. appeared first on The Kyiv Independent.  ( 1 min )

According to Ukraine’s General Staff, the Russian warship “Orsk” was destroyed in the port of Berdiansk, which is currently occupied by the Russian forces. The post Ukraine’s military: Large Russian amphibious assault ship destroyed in Berdiansk. appeared first on The Kyiv Independent.  ( 1 min )

According to the Kyiv City State Administration, Russian attacks have also damaged 10 private houses, 12 schools, and 6 kindergartens in the Ukrainian capital since the beginning of the full-scale invasion. The post 87 residential buildings damaged in Kyiv since Feb. 24. appeared first on The Kyiv Independent.  ( 1 min )

Russia still has the vast majority of the assembled surface to air missiles and cruise missiles available, ABC News reported citing an unnamed U.S. defense official. The post ABC: Russia launched 1,200 missiles on Ukraine. appeared first on The Kyiv Independent.  ( 1 min )

In an interview with Sky News, Dmitry Polyanskiy, one of Russia’s top diplomats in the United States, said that Putin could use nuclear weapons if the country feels it is facing an “existential” threat. Polyanskiy also denied that Russia is committing war crimes in Ukraine. The post Russian deputy ambassador to the UN: Russia retains right to use nuclear weapons if “provoked” by NATO. appeared first on The Kyiv Independent.  ( 1 min )

According to a U.K. government press release on March 24, the missiles include anti-tank and high explosive weapons. The U.K. will also provide £25 million ($33 million) to the Ukrainian Armed Forces. U.K. Prime Minister Boris Johnson will announce the package at the NATO and G7 leaders’ meeting this week. The post UK to supply Ukraine with 6,000 defensive missiles. appeared first on The Kyiv Independent.  ( 1 min )

Ukrainian Minister of Ecology and Natural Resources Ruslan Strelets said in a televised interview on March 24 that more than 30 fires have been recorded in the area over the past two weeks. The International Atomic Energy Agency earlier reported on March 23 that it was informed by Ukraine that […] The post Most fires in Chornobyl Exclusion Zone contained. appeared first on The Kyiv Independent.  ( 1 min )

Voice of America correspondent Carla Babb relayed the information on Twitter on March 23, citing an unnamed U.S. Department of Defense official. Ukrainian intelligence previously said on March 20 that it expected Belarus to join Russia in its invasion of Ukraine within 1-2 days of its announcement. The post Pentagon: No signs Belarus preparing to invade Ukraine. appeared first on The Kyiv Independent.  ( 1 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Ukraine claims it’s using facial recognition to identify dead Russian soldiers Ukraine has started using facial recognition technology to identify dead Russian soldiers, a senior government official has claimed. Mykhailo Fedorov, vice prime…  ( 5 min )

A ranking of 76 economies on their progress and commitment toward building a low-carbon future.  ( 6 min )

A 23-year-old Russian national has been indicted in the U.S. and added to the Federal Bureau of Investigation's (FBI) Cyber Most Wanted List for his alleged role as the administrator of Marketplace A, a cyber crime forum that sold stolen login credentials, personal information, and credit card data. Igor Dekhtyarchuk, who first appeared in hacker forums in 2013 under the alias "floraby," has  ( 3 min )

A Chinese-speaking advanced persistent threat (APT) has been linked to a new campaign targeting gambling-related companies in South East Asia, particularly Taiwan, the Philippines, and Hong Kong. Cybersecurity firm Avast dubbed the campaign Operation Dragon Castling, describing its malware arsenal as a "robust and modular toolset." The ultimate motives of the threat actor are not immediately  ( 3 min )

Before hunting malware, every researcher needs to find a system where to analyze it. There are several ways to do it: build your own environment or use third-party solutions. Today we will walk through all the steps of creating a custom malware sandbox where you can perform a proper analysis without infecting your computer. And then compare it with a ready-made service. Why do you need a malware  ( 6 min )

Authentication services provider Okta on Wednesday named Sitel as the third-party linked to a security incident experienced by the company in late January that allowed the LAPSUS$ extortion gang to remotely take over an internal account belonging to a customer support engineer. The company added that 366 corporate customers, or about 2.5% of its customer base, may have been impacted by the "  ( 4 min )

A new large scale supply chain attack has been observed targeting Azure developers with no less than 218 malicious NPM packages with the goal of stealing personal identifiable information. "After manually inspecting some of these packages, it became apparent that this was a targeted attack against the entire @azure NPM scope, by an attacker that employed an automatic script to create accounts  ( 3 min )

VMware on Wednesday released software updates to plug two critical security vulnerabilities affecting its Carbon Black App Control platform that could be abused by a malicious actor to execute arbitrary code on affected installations in Windows systems. Tracked as CVE-2022-22951 and CVE-2022-22952, both the flaws are rated 9.1 out of a maximum of 10 on the CVSS vulnerability scoring system.  ( 3 min )

Wichtige Sicherheitsupdates schließen zwei kritische Lücken in Carbon App Control für Windows.  ( 3 min )

Have a break, don't have any more KitKat, junk food giant also tells Russia Nestlé, which is to stop selling KitKats and other brands in Russia, says corporate data leaked online this week by Anonymous was not stolen nor all that useful.…  ( 9 min )

Agreement could simplify demands for potential evidence, leaves real-time surveillance unaddressed The US and Canada said on Wednesday that representatives are negotiating an agreement to apply the CLOUD Act to law enforcement operations that reach across their respective borders.…  ( 10 min )

Amazon, Pepsi, Siemens and more go for digitally twinned ops GTC  Nvidia is investing mightily in the concept of "digital twins" or large-scale simulations that illuminate real-world processes. This week at the company's GPU Technology Conference (GTC) they demonstrated how several high-profile companies are bringing digital twins into production via their all-encompassing Omniverse hardware and software platforms.…  ( 8 min )

No one should be using long-dead protocol so it's gotta go The Samba project just released version 4.16, and with it parts of the veteran SMB 1 file-sharing protocol are being permanently removed.…  ( 8 min )

No one should be using long-dead protocol so it's gotta go The Samba project just released version 4.16, and with it parts of the veteran SMB 1 file-sharing protocol are being permanently removed.…  ( 8 min )

High valuation just weeks out of stealth for browser in business control A startup pitching an "enterprise browser" hit unicorn status only weeks after emerging from stealth.…  ( 8 min )

Increases inbound for Musk's satellite Internet service and his Falcon rockets Prices are rising for customers of both Elon Musk's Starlink Internet service and his SpaceX rockets, with "excessive levels of inflation" to blame.…  ( 7 min )

Another year, another batch of record-setting cybercrime losses The FBI's latest yearly cybercrime report is bad news for those of us trying to stay safe: The criminals continue to have a leg up, leading to record financial losses.…  ( 8 min )

Claims it has cracked the scalability problem with incoming H100 GTC  If you're training a large deep learning model, and you want it to train it faster, you should just throw more GPUs at it, right? Well, that works for a while, but there is actually a limit to the amount of proportional performance you can expect from adding additional GPUs in a server cluster.…  ( 9 min )

Remember when orgs were worried about processing sensitive info in public cloud? Microsoft has linked up with Nvidia to enable confidential computing in its Azure cloud to encompass the graphics giant's GPUs. This will allow GPUs to process workloads on Azure that call for the highest level of protection, such as applications in healthcare or financial services.…  ( 8 min )

GitHub algorithm seeks to improve discovery. Developers disagree. GitHub has introduced a new feed into the dashboard of users and it doesn't appear to have gone down well with the code shack's regulars.…  ( 8 min )

Of course it's still making money hand over fist, but there's an actual number to put on war's effect on big tech Adobe had a great first quarter this year, but the real news is the losses it is predicting due to the Russo-Ukraine war, which finally gives us a sense of the financial impact of Russian pullouts on big tech.…  ( 8 min )

But judge encourages government to pursue criminal or civil charges against the company Chinese telecoms kit maker ZTE is being allowed to end its five-year probation period in the US that resulted from its admission to violating trade sanctions in 2017.…  ( 8 min )

'It has completely distorted the way we speak to each other,' says Swift and Rust boffin Aria Beingessner, a member of the teams that implemented both Rust and Swift, has an interesting new take on some of those (and other) language's problems – that C isn't a programming language anymore.…  ( 8 min )

The project lives on as part of the ISS – but for how much longer? Today marks 21 years since Russia's space station, Mir, returned to Earth.…  ( 8 min )

Aim for prevention rather than outrunning this malware Ransomware moves more quickly than most organizations can respond. Though knowing they have a specific limited window should help inform where to put their defenses, according to security data shop Splunk.…  ( 9 min )

Why use 20 systems when one will do Microsoft is replacing at least some of its natural-language processing systems with a more efficient class of AI model.…  ( 8 min )

Which could be useful for people writing code to run across CPUs, GPUs, etc GTC  Nvidia said the lines are blurring between the standard C++ and Nv's CUDA C++ library when it comes to parallel execution of code.…  ( 10 min )

As England's controversial scheme to grab 55 million citizen's medical data is withdrawn, emergency powers are extended Concerns are being raised over UK government proposals to extend emergency powers introduced during the pandemic, giving it access to patient data held by general practitioners (GPs).…  ( 9 min )

Short-term release includes Simple Web Server, pattern matching for switch expressions, and more Oracle's Java 18 development environment has hit the streets, with Big Red promising nine enhancements including the ability to add sample source code to API documentation.…  ( 8 min )

And it's right more often than rapid antigen tests An Australian software developer claims to have created a smartphone app that can accurately diagnose COVID-19 by listening to a user's coughs.…  ( 8 min )

Still won't let Hong Kong buyers use terms Beijing may not appreciate Apple has stopped political censorship of terms that buyers choose to have engraved onto its products in Taiwan – but has kept the policy in both mainland China and Hong Kong, leading an academic research group to wonder whether Apple does not fully understand its own censorship policies and applications, or is bowing to Beijing's wishes.…  ( 9 min )

Russia is Putin together plans to create its own versions of banned products and local business is promising to buy Between 50,000 and 70,000 Russian IT professionals have left the country in recent weeks, and more plan to follow, according to the Russian Association of Electronic Communications – an organization that promotes online businesses.…  ( 8 min )

Plus: Microsoft reveals gang pulled off limited source code heist after single account compromised Identity management as-a-service platform Okta says the Lapsus$ extortion gang may in fact have managed to see some of its customers' data, and Microsoft has admitted the crew got its grubby paws on some source code.…  ( 8 min )

Microsoft confesses gang pulled off limited source code heist after single account compromised Identity management as-a-service platform Okta has admitted that the Lapsus$ extortion gang managed to see some of its customers' data, and Microsoft has admitted the gang got its grubby paws on some source code.…  ( 9 min )

China's smartphone and IoT gadget champ says it might even see a glut by 2023 Chinese smartphones-and-more manufacturer Xiaomi believes its silicon supply chain will return to normal in the second half of 2022 – and by next year it may even have an embarrassment of riches to consider when it shops for components.…  ( 8 min )

We wonder how deep this rabbit hole will go GTC  Nvidia teased several updates to its Morpheus AI security framework at GTC this week, and also announced it would make the application framework generally available in April.…  ( 9 min )

It's just a business expense at this point Apple has just been assessed a ninth fine of €5m ($5.5m) in the Netherlands for failing to allow Dutch dating apps to process transactions using a third-party payment service, as required by the European country's competition watchdog.…  ( 9 min )

Everything from molecular structure to freezer distribution involved ML, says exec GTC  AI algorithms were involved in every step of the way to design and deliver Pfizer's COVID-19 vaccine and antiviral tablets to hundreds of millions of people as coronavirus spread around the world.…  ( 9 min )

Zakhareev won a gold medal at the European amateur boxing championship for boxers under 22 years old. In the final match, he defeated U.K. Garan Croft. The post Ukrainian boxer Yurii Zakhareev wins gold at European boxing championship. appeared first on The Kyiv Independent.  ( 1 min )

According to Deputy Prime Minister Iryna Vereshchuk, 2,912 people were evacuated from besieged Mariupol to Zaporizhzhia. In total, seven out of nine agreed-upon humanitarian corridors worked out on Wednesday. The post 4,554 people evacuated from hot spots on March 23. appeared first on The Kyiv Independent.  ( 1 min )

Russia’s Federal Service for Supervision of Communications, Information Technology and Mass Media, or Roskomnadzor, has banned Google News service, accusing it of spreading “false news” about Russia’s war against Ukraine. The post Russia bans Google News service. appeared first on The Kyiv Independent.  ( 1 min )

As U.S. sanctions against Russian oligarch Roman Abramovich were to go out along with the sanctions from the U.K. and EU, President Volodymyr Zelensky asked U.S. President Joe Biden to hold off the measure, the Wall Street Journal reported citing unnamed sources. Zelensky allegedly said that Abramovich could be an […] The post WSJ: Zelensky asked Biden not to sanction Russian oligarch Abramovich yet to facilitate peace talks. appeared first on The Kyiv Independent.  ( 1 min )

The post General Staff: Russian invaders try to undermine Ukraine’s sowing campaign. appeared first on The Kyiv Independent.  ( 1 min )

European Pravda reported that it was not clear what was the reason for Roman Leshchenko’s resignation. He hasn’t yet commented on the matter. The post Media: Ukraine’s agriculture minister resigns. appeared first on The Kyiv Independent.  ( 1 min )

Oksana Bauila, a reporter with Russia’s The Insider media outlet was on assignment at the site of a Russian shelling in Kyiv’s Podil district when the Russian forces launched another strike at the spot. According to The Insider, two people accompanying Baulina were injured and hospitalized, while one more civilian […] The post Russian journalist killed by Russian shelling in Kyiv. appeared first on The Kyiv Independent.  ( 1 min )

“We’ve seen numerous credible reports of indiscriminate attacks and attacks deliberately targeting civilians, as well as other atrocities,” reads the March 23 statement by U.S. Secretary of State Antony Blinken. The post US: Russian forces commit war crimes in Ukraine. appeared first on The Kyiv Independent.  ( 1 min )

Rescuers continue to search for bodies under the rubble at the site of the March 1 shelling in central Kharkiv, according to Yevhen Vasylenko, the head of the State Emergency Service in Kharkiv Oblast. The post Death toll in Russian attack of Kharkiv Oblast administration building grows to 24. appeared first on The Kyiv Independent.  ( 1 min )

Elvira Nabiullina, who has led Russia’s Central Bank for nearly nine years, tried to quit when Russian President Vladimir Putin ordered a full-scale invasion of Ukraine, Bloomberg reported, citing unnamed sources. Putin did not accept her resignation. The post Bloomberg: Russia’s Central Bank governor tried to resign over war in Ukraine, Putin rejected. appeared first on The Kyiv Independent.  ( 1 min )

According to Kharkiv Mayor Ihor Terekhov, Russian forces have destroyed 1,143 buildings in Ukraine’s second-biggest city, 998 of which are residential buildings, since Feb. 24. The post 1,143 buildings destroyed in Kharkiv since beginning of full-scale invasion of Ukraine. appeared first on The Kyiv Independent.  ( 1 min )

Russian troops shelled a parking lot near a shopping mall in Kyiv, killing one person and injuring two more, Kyiv Mayor Vitalii Klitschko said. The post Russian forces shell a parking lot in Kyiv’s Podil district, one dead. appeared first on The Kyiv Independent.  ( 1 min )

An Extraordinary Summit of NATO Heads of State and Government will take place on 24 March 2022 in Brussels. It needs to be a game-changer. The focal point of this Summit will be the all-out war launched by Russia against Ukraine one month earlier, namely on 24 February 2022, and […] The post Eugene Czolij: NATO must act now or face dreadful consequences later appeared first on The Kyiv Independent.  ( 4 min )

TT news agency quoted Swedish Defense Minister Peter Hultqvist saying that the country will provide additional anti-tank equipment. The country has already sent 5,000 anti-tank weapons and other military aid to Ukraine. The post Swedish Defense Minister: Ukraine to receive 5,000 anti-tank weapons. appeared first on The Kyiv Independent.  ( 1 min )

A city at war needs more than just weapons.  To survive, a city needs uninterrupted access to food, medicine and other critical goods. While Kyiv has avoided the worst of Russia’s depredations, which have come close to razing Mariupol and Kharkiv to the ground, the capital city remains the key […] The post Kyiv keeps supply chains open amid defense appeared first on The Kyiv Independent.  ( 4 min )

The Wall Street Journal wrote that between 7,000 and 15,000 Russian soldiers have been killed since Feb.24. The news outlet quoted a senior NATO official. The post WSJ: Up to 40,000 Russian troops killed, wounded, taken prisoner or missing in Ukraine. appeared first on The Kyiv Independent.  ( 1 min )

According to German Foreign Minister Annalena Baerbock, the country will provide Ukraine with Strela surface-to-air missiles, after weeks of delays in delivery. The post German Foreign Minister: further Strela missiles are on way to Ukraine. appeared first on The Kyiv Independent.  ( 1 min )

Health Minister Viktor Lyashko says the ministry began suppling bulletproof vests to emergency medical workers, “who despite everything are rescuing Ukrainians.” The post Health Minister: Russia damaged 58 ambulances, killed 6 medics since Feb.24. appeared first on The Kyiv Independent.  ( 1 min )

Journalist Svitlana Zalizetska, head of Ria-Melitopol website, told Suspilne news outlet that Russian troops broke into her house and kidnapped her 75-year-old father. “They told my mother that they would release my father only after I come back,” said Zalizetska. According to her, Halyna Danylchenko, who was installed by Russian […] The post Russian troops abduct father of journalist in occupied Melitopol, demand her arrival. appeared first on The Kyiv Independent.  ( 1 min )

Journalist Svitlana Zalizetska, head of Ria-Melitopol website, told Suspilne news outlet that Russian troops broke into her house and kidnapped her 75-year-old father. “They told my mother that they would release my father only after I come back,” said Zalizetska. According to her, Halyna Danylchenko, who was installed by Russian […] The post Russian troops abduct father of journalist in occupied Melitopol, demanding her arrival. appeared first on The Kyiv Independent.  ( 1 min )

NATO Secretary General Jens Stoltenberg said that the alliance is expected to agree to provide Ukraine with “additional support including cyber security equipment” and supplies to “protect against chemical, biological, radiological and nuclear threats.” The post Stoltenberg: NATO to supply Ukraine nuclear, chemical protection equipment. appeared first on The Kyiv Independent.  ( 1 min )

“The Ukrainian embassy will continue to work in Belarus in a 1+4 format, meaning an ambassador and four staff members,” Belarusian Foreign Ministry spokesperson Anatoly Glaz told Belta state-run news agency. The post Belarus expels most Ukrainian diplomats, shuts Ukraine’s consulate general. appeared first on The Kyiv Independent.  ( 1 min )

Oleh Baturin, a journalist for the Novy Den, a newspaper in Ukraine’s southern Kherson Oblast, was kidnapped by the Russian military on March 12. Baturin lives in Kakhovka, a city of 35,000 people 90 kilometers to the west from the regional capital Kherson. For many years he has been covering […] The post Ukrainian journalist released from Russian captivity: ‘They were most interested in finding organizers of pro-Ukrainian rallies’ appeared first on The Kyiv Independent.  ( 6 min )

Russian President Vladimir Putin said during a televised government meeting, that “unfriendly countries” must pay for Russian energy in rubles and ordered the changes to be implemented within a week. EU member states are part of Russia’s official “unfriendly countries” list. The post Putin: Russia will only accept rubles for gas deliveries to EU members. appeared first on The Kyiv Independent.  ( 1 min )

Russia’s Ambassador to Indonesia Lyudmila Vorobieva said Vladimir Putin intends to attend the G20 summit being hosted by Indonesia in October. The U.S. and its Western allies are assessing whether Russia should remain in the group, while China backed Russia, saying “Russia is an important member.” The post Putin plans to attend autumn G20 summit, says ambassador. appeared first on The Kyiv Independent.  ( 1 min )

France’s two largest banks by total assets – Crédit Agricole and BNP Paribas – are pulling out of Russia amid the country’s invasion of Ukraine. Crédit Agricole added that its priority was helping to support its 2,400 employees in Ukraine, who were helping ensure essential banking activities continued despite being […] The post French Crédit Agricole, BNP Paribas leave Russia. appeared first on The Kyiv Independent.  ( 1 min )

According to the recent poll conducted by the Rating Group, a fifth of Ukrainians add that European countries and international organizations must pay for rebuilding Ukraine’s economy. Multiple answers were allowed. According to the poll, 53% of Ukrainians are unemployed because of war. The post Poll: 90% of Ukrainians believe Russia must pay for the country’s reconstruction after war. appeared first on The Kyiv Independent.  ( 1 min )

Nestle faced backlash from consumers, activist groups and politicians for not pulling out from Russia after it invaded Ukraine. Now, the company says it will partly halt operations in Russia, yet continue to provide essential food, such as infant food and medical/hospital nutrition. The post Nestle to partly suspend operation in Russia, discontinues KitKat and Nesquik. appeared first on The Kyiv Independent.  ( 1 min )

Russian forces targeted the satellite towns of Kyiv with phosphorus bombs on the night of March 22, according to Irpin Mayor Oleksandr Markushin. The use of such weapons against civilians is banned by the Geneva Conventions. The post Russia uses white phosphorus bombs in Hostomel and Irpin. appeared first on The Kyiv Independent.  ( 1 min )

It means that the Russian troops in the area are encircled. The post Bucha City Council: Ukraine’s military surround Bucha, Irpin and Hostomel. appeared first on The Kyiv Independent.  ( 1 min )

167 children were injured by Russian attacks, according to the Prosecutor General’s Office. 61 children were killed in Kyiv Oblast, 41 in Kharkiv Oblast, 40 in the Donetsk Oblast, 32 in Chernihiv Oblasts, 24 in the Mykolaiv Oblast, 16 in Kyiv, 15 in Zhytomyr Oblast, 15 in Kherson Oblast,15 in […] The post Russian war kills 121 children since Feb. 24. appeared first on The Kyiv Independent.  ( 1 min )

It happened for the first time since the attack began. The post Reuters: Russia combat power in Ukraine declines below 90% of pre-invasion levels, US official says. appeared first on The Kyiv Independent.  ( 1 min )

Ukraine’s richest oligarch Rinat Akhmetov told the Wall Street Journal on March 23 that his Azovstal and Ilyich metallurgical plants located in besieged Mariupol would not operate under Russian occupation. Together they employ 40,000 people, and are temporarily closed now. The post Akhmetov: Mariupol’s metal factories won’t work under Russian occupation. appeared first on The Kyiv Independent.  ( 1 min )

A woman walks near the beer shelf in Pravda Beer Theater, a four-story located in the center, in Lviv, Ukraine on March 21. The post Western Ukraine loosens alcohol ban, Lviv says ‘no, thank you’ appeared first on The Kyiv Independent.  ( 5 min )

According to the report, Ukrainian troops have also destroyed 517 Russian tanks, 1,578 armored vehicles, 1,008 cars, 267 artillery pieces, 80 multiple rocket launchers, 47 surface-to-air missiles, at least 101 jets, 124 helicopters, 4 boats, 70 fuel tanks, and 42 drones. The post Ukraine’s military: 15,600 Russian troops killed since Feb. 24. appeared first on The Kyiv Independent.  ( 1 min )

To do that, Russians are advancing from Kharkiv in the north and Mariupol in the south, according to a March 23 report by the British Defense Ministry. The post UK intelligence: Russian troops trying to encircle Ukraine’s forces in eastern Ukraine. appeared first on The Kyiv Independent.  ( 1 min )

The bridge was used to evacuate civilians from Chernihiv, located 130 kilometers northeast of Kyiv, and bring humanitarian aid to the city, which has no electricity and suffers from the shortage of supplies. The post Russian invaders destroy Chernihiv bridge to Kyiv. appeared first on The Kyiv Independent.  ( 1 min )

The Russian forces fired at Kharkiv with tank cannons, rocket-propelled grenade launchers and artillery, according to the governor of Kharkiv Oblast Oleh Synyehubov. 8 civilians were injured in Lozova, a city in Kharkiv Oblast, where 20 houses, a school and a kindergarten were damaged by Russian shelling. The post Kharkiv Oblast shelled 32 times overnight. appeared first on The Kyiv Independent.  ( 1 min )

The corridors will evacuate people from besieged Mariupol and other cities in the Donetsk region, Luhansk, Zaporizhzhia, and from the outskirts of Kyiv, according to Deputy Prime Minister Iryna Vereshchuk. The post Ukraine expects 9 humanitarian corridors to open on March 23. appeared first on The Kyiv Independent.  ( 1 min )

Russian shelling hit a shopping center, a high-rise residential building and some private houses on the night of March 23 in Kyiv’s Sviatoshynskyi and Shevchenkivskyi districts, according to Kyiv’s city administration. The post At least 4 people injured by overnight Russian shelling in Kyiv. appeared first on The Kyiv Independent.  ( 1 min )

According to Luhansk Oblast Governor Serhiy Gaidai, Russians struck an apartment building in Luhansk Oblast Rubizhne at around 8 p.m. local time on March 22. The shell exploded on the fifth floor, killing three people, including two children. The post Two children killed following Russian attack on Rubizhne. appeared first on The Kyiv Independent.  ( 1 min )

Russia has withdrawn most of its helicopters from a strategic Chornobayivka airport in southern Ukraine’s Kherson Oblast, according to satellite images provided by space imaging company Planet Labs. According to the New York Times, Ukrainian forces attacked the Kherson airport, inflicting considerable damage to Russian equipment. Russian ground troops appear […] The post Satellite imagery shows Russia removing military aircraft from a key airport. appeared first on The Kyiv Independent.  ( 1 min )

The General Staff of Ukraine’s Armed Forces released the information claiming that as of March 22 the Russian military sustained 15,300 casualties. Over the ten years of the USSR’s war in Afghanistan, the reported number was 15,051. The post Russian military casualties have surpassed that of the Soviet invasion of Afghanistan. appeared first on The Kyiv Independent.  ( 1 min )

A U.S. Department of Defense official said during a closed briefing at the Pentagon on March 22 that some Russian troops had been ‘taken out of the fight’ by frostbite due to a lack of warm clothes. The official also noted that Russian warships are running out of fuel. Nearly […] The post Pentagon: Russian forces are short on food, fuel and winter gear. appeared first on The Kyiv Independent.  ( 1 min )

UN chief Antonio Guterres said on March 22 that Russia’s invasion of Ukraine “is going nowhere fast.” Speaking at UN headquarters in New York, he decried the conflict as “absurd” and “unwinnable.” “Even if Mariupol falls, Ukraine cannot be conquered city by city, street by street, house by house,” Guterres […] The post UN chief calls on Russia to end ‘unwinnable’ war. appeared first on The Kyiv Independent.  ( 1 min )

According to the General Staff of Ukraine’s Armed Forces, Russian forces also lost seven tanks, five drones (two destroyed, three captured), six artillery pieces. Advances in Luhansk and Donetsk were stopped, preventing the Russian military from gaining a foothold. The post Ukrainian military repels 7 Russian assaults, destroys six planes and five UAVs. appeared first on The Kyiv Independent.  ( 1 min )

A convoy of 11 empty buses — driving towards Mariupol to rescue Ukrainians from besieged city — has been seized by Russian forces, the Ukrainian government reports. The Russians have driven the buses, along with the original bus drivers and several emergency services workers, to an undisclosed location. The post Russian forces steal buses driving to rescue people from Mariupol. appeared first on The Kyiv Independent.  ( 1 min )

Ukraine sets up an official portal help.gov.ua for those who want to provide humanitarian or financial assistance to affected people, businesses or the government amid Russia’s war against Ukraine. The website helps to find out how to send and whom to address humanitarian aid. The portal also provides contacts of […] The post President’s Office launches humanitarian aid website. appeared first on The Kyiv Independent.  ( 1 min )

A Russian aircraft has fired upon an oil refinery in Lysychasnk, Luhansk Oblast, which is owned by Russian oil company Rosneft. According to Luhasnk Oblast Governor Serhiy Haidai, firefighters are currently fighting a blaze at the site. The post Russians attack oil refinery that they own. appeared first on The Kyiv Independent.  ( 1 min )

Roskomnadzor, Russia's telecommunications regulator, has banned Alphabet's news aggregator service Google News and blocked access to the news.google.com domain for providing access to "unreliable information" on the ongoing war in Ukraine. [...]  ( 3 min )

An ongoing Mustang Panda campaign that has started at least eight months ago has been uncovered by threat analysts who also managed to sample and analyze custom malware loaders and a new Korplug variant. [...]  ( 4 min )

The Federal Bureau of Investigation (FBI) says ransomware gangs have breached the networks of at least 649 organizations from multiple US critical infrastructure sectors last year, according to the Internet Crime Complaint Center (IC3) 2021 Internet Crime Report. [...]  ( 4 min )

Windows 11 22H2 inches closer to release as Microsoft has now moved this version to the Windows Insider 'Beta' channel, allowing Insiders time to switch channels before a newer version is released to the 'Dev' channel. [...]  ( 4 min )

Microsoft has signed off on Windows 11 22H2, which is now moving exclusively to the Windows Insider 'Release' channel, while the new Preview Build 22581 released today is being offered on both the 'Beta' and 'Dev' channels. [...]  ( 3 min )

Microsoft says the Outlook PDF preview feature might be broken for some Microsoft 365 customers on systems where the company's PowerToys open-source toolset is also installed. [...]  ( 3 min )

Security analysts from two companies have spotted a new case of hackers targeting hackers via clipboard stealers disguised as cracked RATs and malware building tools. [...]  ( 4 min )

An unknown Chinese-speaking threat actor has been targeting betting companies in Taiwan, Hong Kong, and the Philippines, leveraging a vulnerability in WPS Office to plant a backdoor on the targeted systems. [...]  ( 4 min )

Microsoft has fixed a known Bluetooth issue causing some Windows 10 systems to crash with a blue screen of death (BSODs) after installing the January KB5009596 cumulative update. [...]  ( 3 min )

Researchers have conducted a technical experiment, testing ten ransomware variants to determine how fast they encrypt files and evaluate how feasible it would be to timely respond to their attacks. [...]  ( 4 min )

Microsoft has confirmed that one of their employees was compromised by the Lapsus$ hacking group, allowing the threat actors to access and steal portions of their source code. [...]  ( 4 min )

Microsoft has released the optional KB5011543 Preview cumulative update for Windows 10 20H2, Windows 10 21H1, and Windows 10 21H2. [...]  ( 4 min )

The White House is urging U.S. organizations to shore up their cybersecurity defenses after new intelligence suggests that Russia is preparing to conduct cyberattacks in the near future. [...]  ( 5 min )

Okta, a major provider of access management systems, says that 2.5%, or approximately 375 customers, were impacted by a cyberattack claimed by the Lapsus$ data extortion group. [...]  ( 5 min )

Okta, a major provider of access management systems, has completed its investigation into a breach incident claimed by the Lapsus$ data extortion group. [...]  ( 4 min )

In einem ersten Bundesstaat können Bürger den Führerschein im Apple Wallet speichern. Der digitale Ausweis ist vorerst nur für Kontrollen am Flughafen geeignet.  ( 4 min )

Ein Großteil der Büroangestellten ist glücklich im Job – viele denken dennoch über einen Wechsel nach, ergab eine Studie des Software-Anbieters awork.  ( 4 min )

Viel Feinschliff und einheitliches Gewand für neue Gnome-Anwendungen: In Gnome 42 sorgt die Bibliothek libadwaita für verbindliche Designs, hell oder dunkel.  ( 5 min )

Universal GPU heißt Super Micros neue Server-Serie. Der Name ist Programm: Die Systeme lassen sich mit beliebigen GPU-Beschleunigern bestücken.  ( 4 min )

Die funktionale Sprache bringt Syntax- und Namespace-Neuerungen sowie Bugfixes für die Performance und Fehlermeldungen.  ( 4 min )

Für einen Blackout sind preisgünstige USVs nicht ausgelegt. Einen Stromausfall können sie aber für wenige Minuten überbrücken und so vor Datenverlust schützen.  ( 6 min )

Dr. Stenkamp, TÜV Nord, sagt: "Wir stehen an der Schwelle eines neuen Zeitalters. KI übernimmt Aufgaben schneller und fehlerfreier, als Menschen das könnten."  ( 5 min )

Nutzer der Videokonferenz-Software Zoom können in einem Meeting Tier-Avatare verwenden und unter anderem als Kuh, Hase, Fuchs oder Hund am Gespräch teilnehmen.  ( 3 min )

Mit den Features des San-Diego-Updates der Now Platform will ServiceNow Produktivität steigern, unter anderem mit einem erweiterten Automatisierungsdienst.  ( 3 min )

Credit Kudos wurde angeblich von Apple gekauft. Das Startup prüft die Kreditwürdigkeit, indem es Kontoaktivitäten auswertet.  ( 4 min )

Der Facebook-Mutterkonzern verstärkt mit dem Sponsoring sein Engagement für die Programmiersprache, die intern für Machine Learning stark genutzt wird.  ( 4 min )

Mit neuen Versionen schließt das Drupal-Projekt eine Sicherheitslücke, durch die Angreifer Kontrolle über ein betroffenes System übernehmen könnten.  ( 3 min )

Nvidia-Chef Jensen Huang will 2023 die CPU-Konkurrenz überflügeln, könnte es aber gegen AMDs kommende 128-Kerner mit dem Codenamen "Bergamo" schwer haben.  ( 4 min )

Zwar ist der Flash-Speicher der neuen Workstation unverlötet und die Geräte haben zwei Slots. Doch offenbar bremst Apple die Erweiterbarkeit per Software.  ( 4 min )

Mit der Version 0.60 führt Nushell viele neue Funktionen ein. Unter anderem können Nutzer die Autovervollständigung für Kommandos selbst erweitern.  ( 4 min )

Das Hamburger Start-up matcht IT-Jobs automatisiert mit Profilen jobsuchender Entwickler und startet am 24. März ein stackstream-Festival mit bekannten Codern.  ( 5 min )

Heute haben wir starke Angebote für zwei Laptops von Asus, drei Fernseher mit 55 Zoll, eine Smartwatch und zwei Smartphones von Xiaomi sowie Sony gefunden.  ( 4 min )

Das Self Service Repair Program wurde im letzten Jahr vorgestellt und sollte Anfang 2022 beginnen. Doch bislang ist der Start noch nicht erfolgt.  ( 4 min )

Microsoft und Okta haben erfolgreiche Attacken durch Lapsus$ bestätigt. Unter den geleakten Daten soll sich Quellcode von Bing und Cortana befinden.  ( 4 min )

Der neue Linux-Kernel legt beim Powermanagement für moderne AMD-CPUs nach. Er macht anonymen Speicher bewertbar und steuert auf portables eBPF zu.  ( 4 min )

GitLab-Ultimate-Nutzer können nun zwei beliebige Epics verlinken und die Environments-Seite steht für alle Nutzergruppen in neuem Design bereit.  ( 4 min )

Mit den Tipps aus unserem Sonderheft gelingt die Arbeit zwischen Home und Office: von der Videokonferenz über Dokumentenaustausch bis hin zum Datenschutz.  ( 4 min )

Die secIT 2022 startet nächste Woche. Dort erfährt man, wie man IT-Attacken abwehrt und wie man sich effektiv verhält, wenn Angreifer bereits im System sind.  ( 4 min )

Der KI-Sonderausschuss der EU hat seine Empfehlungen vorgelegt. Er befürchtet, dass Europa im globalen Wettlauf um die Technik ins Hintertreffen gerät.  ( 5 min )

Der Großteil der Teilnehmer an einer Umfrage fürchtet, dass sich Dritte ihrer Identität anmaßen. Mehr als die Hälfte hält zusätzliche Maßnahmen für notwendig.  ( 4 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Inside the app Minnesota police used to collect data on journalists at protests Photojournalist J.D. Duggan was covering a protest in Minnesota in April 2021 when police officers surrounded him and others, and…  ( 5 min )

In April of last year, a freelance photojournalist named J.D. Duggan was covering a protest in Brooklyn Center, Minnesota, a suburb of Minneapolis, when things took a disturbing turn. A few days earlier, a police officer in Brooklyn Center had shot and killed 20 year-old Daunte Wright, and a community wounded and incensed by George…  ( 7 min )

In this article, Louis Lazaris describes and demonstrates some interesting HTML attributes that you may or may not have heard of and perhaps find useful enough to personally use in one of your projects.  ( 9 min )

A China-based advanced persistent threat (APT) known as Mustang Panda has been linked to an ongoing cyberespionage campaign using a previously undocumented variant of the PlugX remote access trojan on infected machines. Slovak cybersecurity firm ESET dubbed the new version Hodur, owing to its resemblance to another PlugX (aka Korplug) variant called THOR that came to light in July 2021. "Most  ( 3 min )

A new class of security tools is emerging that promises to significantly improve the effectiveness and efficiency of threat detection and response. Emerging Extended Detection and Response (XDR) solutions aim to aggregate and correlate telemetry from multiple detection controls and then synthesize response actions. XDR has been referred to as the next step in the evolution of Endpoint  ( 3 min )

Researchers have disclosed details of a newly discovered macOS variant of a malware implant developed by a Chinese espionage threat actor known to strike attack organizations across Asia. Attributing the attacks to a group tracked as Storm Cloud, cybersecurity firm Volexity characterized the new malware, dubbed Gimmick, a "feature-rich, multi-platform malware family that uses public cloud  ( 3 min )

Vulnerable routers from MikroTik have been misused to form what cybersecurity researchers have called one of the largest botnet-as-a-service cybercrime operations seen in recent years.  According to a new piece of research published by Avast, a cryptocurrency mining campaign leveraging the new-disrupted Glupteba botnet as well as the infamous TrickBot malware were all distributed using the same  ( 3 min )

Microsoft on Tuesday confirmed that the LAPSUS$ extortion-focused hacking crew had gained "limited access" to its systems, as authentication services provider Okta revealed that nearly 2.5% of its customers have been potentially impacted in the wake of the breach. "No customer code or data was involved in the observed activities," Microsoft's Threat Intelligence Center (MSTIC) said, adding that  ( 4 min )

Mit neuen Versionen schließt das Drupal-Projekt eine Sicherheitslücke, durch die Angreifer Kontrolle über ein betroffenes System übernehmen könnten.  ( 3 min )

Kremlin’s spokesperson Dmitry Peskov said that there’s no other reason Russia could use nuclear weapons, Russian media RIA Novosti reported. The post Peskov: Russia to use nuclear weapons if country’s existence is threatened. appeared first on The Kyiv Independent.  ( 1 min )

In a village in the Brovarskyi district of Kyiv Oblast, a Russian soldier murdered a man and then, along with another soldier, repeatedly raped his wife, according to Prosecutor General Iryna Venediktova. One of the men was identified and is now wanted. The post Prosecutor General: Russian invader kills man, rapes wife in Kyiv Oblast. appeared first on The Kyiv Independent.  ( 1 min )

President Volodymyr Zelensky has topped the list of Europe’s 28 most powerful people, winning the “Audience Choice” online poll created by Politico media outlet. One contributor to the poll described the Ukrainian leader as a “beacon of hope” striving for “peace, democracy, and decency.” The post Zelensky voted most powerful person in Europe. appeared first on The Kyiv Independent.  ( 1 min )

According to Deputy Prime Minister Iryna Vereshchuk, 15 buses evacuated people from the besieged seaport of Mariupol to Zaporizhzhia. The post More than 1,200 residents evacuated from Mariupol on March 22. appeared first on The Kyiv Independent.  ( 1 min )

Chairman of Okhtyrka District Council Serhiy Kirichko was released after a week of captivity by Russian forces, detained in a basement, according to Servant of the People party chairman Olena Shuliak. The official is reported to have returned immediately back to work. The post Sumy Oblast official released from Russian captivity. appeared first on The Kyiv Independent.  ( 1 min )

President Volodymyr Zelensky will give a virtual address to the NATO summit participants, according to his spokesman Sergii Nykyforov. Zelensky will speak about the need to stop Russia’s war crimes against civilians by closing the sky above Ukraine or supplying the country with air defenses. The post Zelensky to join NATO summit on March 24. appeared first on The Kyiv Independent.  ( 1 min )

According to Foreign Minister Dmytro Kuleba, owners of Rizzi restaurant in Baden-Baden have fired an employee for posting a video message to Russia, where he said that Russians were killing children and destroying cities in Ukraine. Kuleba said that the restaurant targets the local Russian-speaking community. The post Ukraine’s FM: German restaurant fires Ukrainian employee for criticizing Russia’s war. appeared first on The Kyiv Independent.  ( 1 min )

The Investigative Committee of Russia opened a case against Russian journalist Alexander Nevzorov for publishing information about the Russian shelling of a maternity hospital in Mariupol. Russia accuses Nevzorov of spreading “false information about the Russian Armed Forces.” The post Russia prosecutes journalist for social media posts about Russian attack on Mariupol. appeared first on The Kyiv Independent.  ( 1 min )

Editor’s Note: The following is a personal account of the Kyiv Independent’s journalist describing spending a day with a small group of volunteers helping people get out of some of the most dangerous areas outside Kyiv.  IRPIN AND STOYANKA, Kyiv Oblast – A clear, frigid day rises over Irpin. The […] The post War Diaries: My day with volunteers saving lives in warzones outside Kyiv appeared first on The Kyiv Independent.  ( 16 min )

According to mayor Serhii Zelensky, 20 homes and businesses were damaged by Russian shelling on March 22. As a result of the bombardment, one person was killed and nine others injured. The post Russian forces damage 20 buildings in Lozova, Kharkiv Oblast. appeared first on The Kyiv Independent.  ( 1 min )

In Pavlohrad, Russian forces have destroyed a railway station with a missile strike, killing one. According to Dnipropetrovsk Oblast Governor Valentyn Reznichenko, 15 freight cars were derailed. Traffic through the station has been halted until further notice. The post Russians destroy railway station in Dnipropetrovsk Oblast, one dead. appeared first on The Kyiv Independent.  ( 1 min )

According to Deputy Prime Minister Iryna Vereshchuk, the militants have captured a humanitarian convoy near the town of Mangush on its way from Mariupol on the agreed-upon with Russians route. “It is reported that the vehicles will be seized, and people may or may not be allowed to leave,” she […] The post Russia’s proxies capture evacuation convoy from Mariupol. appeared first on The Kyiv Independent.  ( 1 min )

Russian shelling occurred at about 1 p.m. on March 22 in a residential district in northern Kyiv. The attack damaged two buildings and a vehicle, killed one and injured three others, according to the local authorities. The post One dead in shelling of Kyiv’s Obolon district. appeared first on The Kyiv Independent.  ( 1 min )

Nikos Dendias said he wanted to lead the mission to the besieged seaport city in southeastern Ukraine, which is home to a sizeable ethnic Greek community. He said at a news conference in Athens that he sent notes to both the Ukrainian and Russian sides about this. The post Greek foreign minister wants to travel with humanitarian aid mission to Mariupol. appeared first on The Kyiv Independent.  ( 1 min )

The plane was taken down by Ukrainian military at 4:45 p.m. on March 22, Mariupol City Council reports. The post Ukrainian forces shoot down Russian plane bombing the city appeared first on The Kyiv Independent.  ( 1 min )

European Association of Zoos and Aquaria has already transferred some funds to zoos in Ukraine that have been suffering since the beginning of Russia’s full-scale invasion of Ukraine, according to the organization’s statement. The post €576,000 raised to support Ukrainian zoos. appeared first on The Kyiv Independent.  ( 1 min )

Viktoria Roshchina, a journalist for Hromadske, has been in captivity in the occupied city of Berdiansk since March 15. She was released on March 22. As a condition for her release, she was forced to record a video in which she said that the Russian forces had saved her life. The post Ukrainian journalist released from Russian captivity appeared first on The Kyiv Independent.  ( 1 min )

In his response to President Volodymyr Zelensky’s address to the Italian parliament on March 22, Prime Minister Mario Draghi said that joining the EU is a long process made up of necessary reforms, adding that Italy is “alongside Ukraine in this process,” Italian media outlet Ansa reports. “Italy wants Ukraine […] The post Italian PM: Italy wants Ukraine to join the European Union appeared first on The Kyiv Independent.  ( 2 min )

Farmak, one of Ukraine’s biggest pharmaceutical companies, suffered nearly Hr 1.5 billion in losses when its warehouse in Makariv, a town 60 kilometers west from Kyiv, burned down during the hostilities there, according to Farmak’s supervisory board member Peter Chernyshov. The post Farmak’s warehouse outside Kyiv burns down. appeared first on The Kyiv Independent.  ( 1 min )

Russian Deputy Foreign Minister Igor Morgulov met with North Korea’s ambassador to Russia and discussed developing bilateral relations “in the context of changes happening on the international arena,” the Russian foreign ministry said on Tuesday. The contact took place as Russia faces increasing isolation over its invasion of Ukraine, which […] The post Russia, North Korea discuss developing relations appeared first on The Kyiv Independent.  ( 1 min )

The stable was put on fire on March 13, its owner told Censor.Net news website. Most of the 32 horses inside have been killed in the fire. The post Russian military burn down stable in Hostomel near Kyiv, with horses inside. appeared first on The Kyiv Independent.  ( 1 min )

The roof of the children’s hospital in Severodonetsk caught fire after it was shelled by Russian forces. Seven children and 15 adults were evacuated from the hospital, the State Emergency Service reported on March 22. The post State Emergency Service: Russian occupiers shell children’s hospital in Luhansk Oblast. appeared first on The Kyiv Independent.  ( 1 min )

According to Levin’s friend, photographer Markiian Lyseiko, he can’t be reached since March 13 since he traveled to the town of Vyshgorod in Kyiv Oblast to take photographs of the hostilities there. The post Ukrainian photojournalist Maks Levin goes missing outside Kyiv appeared first on The Kyiv Independent.  ( 1 min )

Russian forces used tear gas against the demonstrators, Suspilne Kherson reported. Unarmed protests against Russian occupation have been held regularly in Kherson since the city fell on March 2. The post Protesters in Russian-occupied Kherson hold rally, attacked with tear gas. appeared first on The Kyiv Independent.  ( 1 min )

In an address to the Italian parliament, President Volodymyr Zelensky said Italy should freeze Russian assets, impose an embargo on Russian goods and block seaports for Russian vessels. The president also said that the danger to grain exports from Ukraine can cause worldwide hunger. The post Zelensky calls on Italy not to be a ‘resort for murderers.’ appeared first on The Kyiv Independent.  ( 1 min )

According to the report, Ukrainian troops have also destroyed 509 Russian tanks, 1,556 armored vehicles, 252 artillery pieces, 80 multiple rocket launchers, 45 surface-to-air missiles, 99 jets, 123 helicopters and 35 drones. The post Ukraine’s General Staff says 15,300 Russian troops killed since Feb. 24. appeared first on The Kyiv Independent.  ( 1 min )

In late February, Renault suspended production in Moscow due to a disruption in logistics. On March 22, the company decided to resume operations in the country. Renault is the majority owner of AvtoVaz, Russia’s largest car manufacturer famous for the Lada brand. The post Reuters: French automaker Renault resumes production in Moscow. appeared first on The Kyiv Independent.  ( 1 min )

Vasyl Lomachenko was scheduled to fight with Australian boxing champion George Kambosos in Melbourne on June 5. According to Kambosos’ promoter Lou DiBella, the fight is off because  Lomachenko decided to stay in Ukraine and has joined a Territorial Defense unit to protect his country. “We have nothing but the […] The post Lomachenko cancels championship bout due to Russian invasion. appeared first on The Kyiv Independent.  ( 1 min )

President Volodymyr Zelensky said that Ukraine must be told will the country be admitted to NATO soon.  “There are NATO countries that want to guarantee our security but cannot give us membership in the alliance unfortunately. But they’re ready to do what (NATO) would do if we were members of […] The post Zelensky says NATO countries can guarantee Ukraine’s security. appeared first on The Kyiv Independent.  ( 1 min )

Buildings near Malyn were shelled by Russian troops on March 21, Ukraine’s Emergency Situations Service said on March 22. The post Russia shells Zhytomyr Oblast, 3 houses destroyed, 10 damaged. appeared first on The Kyiv Independent.  ( 1 min )

Kryvy Rih Mayor Oleksandr Vilkul said on March 22 that the town of Zelenodolsk and the village of Mala Kostromka in Dnipropetrovsk Oblast had been shelled using Grad multiple rocket launchers. Residential buildings were damaged as a result The post Russian troops shell town near Kryvyi Rih. appeared first on The Kyiv Independent.  ( 1 min )

Vladyslav Atroshenko said in an interview with LB.ua news website on March 22, that there are approximately 130,000 people remaining in the city. Before the all-out war, that number was close to 285,000. He said that Chernihiv is now dealing with a shortage of doctors and those qualified to repair […] The post Mayor of Chernihiv estimates over half of the population has left since start of the war. appeared first on The Kyiv Independent.  ( 1 min )

Deputy Head of the Kyiv City Administration Mykola Povoroznyk said on March 21 that, of the babies born, 427 are boys and 380 are girls. The post Over 800 babies born in Kyiv since Russia’s all-out war in Ukraine. appeared first on The Kyiv Independent.  ( 1 min )

This is slightly larger than the size of Scotland. The Ukrainian De-miners Association reported the preliminary number on March 21 and said that the contaminated areas will be subject to humanitarian de-mining after the war. The post Preliminary estimates of mined areas in Ukraine at least 82,525 square kilometres. appeared first on The Kyiv Independent.  ( 1 min )

In an interview with Ukrinform news agency on March 21, Deputy Head of the State Emergency Service of Ukraine Roman Prymush said the numbers reflect houses damaged since February 24. These figures do not include houses damaged in the temporarily-occupied territories or that could not be assessed due to risk […] The post Russian forces completely destroy 651, partially damage almost 4,000 homes since beginning of full-scale invasion of Ukraine. appeared first on The Kyiv Independent.  ( 1 min )